Andrea Valenza at the University of Genoa discovered and reported this issue to Rapid7

2 vulnerability records and advisories credit this contributor.