This issue was discovered by Doyensec, and reported privately by Luca Carettoni.

1 vulnerability record and advisories credit this contributor.