Cloudflare Public Bug Bounty disclosed a bug submitted by aliend89: https://hackerone.com/reports/2174818 [Source]