In this blog, I am going to share a bug that I came across while performing VAPT for a private project.