This issue was found by Humza Ahmad of ENCS during a VAPT testing session commissioned by one of our customers.

1 vulnerability record and advisories credit this contributor.