Bubble.io security research: 0day exploiting Elasticsearch implementation