U.S. Dept Of Defense disclosed a bug submitted by fklet: https://hackerone.com/reports/1892317 [Source]