fixed https://www.htbridge.com/advisory/HTB23221