0day vulnerability full disclosure: American Express
They knew this was open. They even took it out of their robots.txt :)https://www.americanexpress.com/robots.txtUser-agent: *
Disallow: /us/admin/
Disallow: /us/heroes/
Allow: