Thanks [indoappsec](https://hackerone.com/indoappsec) for reporting this vulnerability through our HackerOne bug bounty program

1 vulnerability record and advisories credit this contributor.