Comment by laeri

I am confused, they didn't contact the company at all and just disclose this publicly? Very immature handling of a vulnerability finding.