Thanks [manual_mint](https://hackerone.com/manual_mint) for reporting this vulnerability through our HackerOne bug bounty program

1 vulnerability record and advisories credit this contributor.