This issue was discovered by Matthew Kienow and disclosure was coordinated by Rapid7.

2 vulnerability records and advisories credit this contributor.