This issue was discovered by 4ra1n and Y4tacker, who also proposed the fix.

1 vulnerability record and advisories credit this contributor.