Cloudflare Public Bug Bounty disclosed a bug submitted by suzuka: https://hackerone.com/reports/2094346 – Bounty: $1000 [Source]