The issue could only have been exploited by a logged-in user performing a specific set of actions.
At this stage, we have no confirmed reports of any data having been accessed or changed without permission, and we believe the issue could not have been used to extract data in large volumes.
And more weasel words at:
The issue could only have been exploited by a logged-in user performing a specific set of actions.
At this stage, we have no confirmed reports of any data having been accessed or changed without permission, and we believe the issue could not have been used to extract data in large volumes.