Comment by TZubiri
10 hours ago
> I think there's still going to be a massive long tail of sites that will never be protected or upgraded,
Ok? But that's super common, and there's thousands of ways to exploit unmaintained systems, nothing special about this.
From a technical level as well, this is not an easy bug to exploit, it's CVSS Attack Complexity:High, it requires a lot of per-target work, it's definitely not copy.fail level
I think we’re saying the same thing - at this stage there’s not much point in withholding details, That’s why I brought up the sites that will never patch - that’s normal and at some point it helps more to release more details.