Comment by serjd

> We reported the issue to Microsoft. They did not consider it a vulnerability, but fixed it

Seems like Microsoft doesn't like to pay for a bug bounty