Bounty for vuln report on old piece of infra with internet-facing grafana, which unfortunately had xss, allowing to leave a cookie bomb on lido.fi