Thanks [@ngalog](https://hackerone.com/ngalog) for reporting this vulnerability through our HackerOne bug bounty program

2 vulnerability records and advisories credit this contributor.