If the author is making it public then it's technically White Hat hacking and it's now up to the company (if they care enough) to resolve this exploit which pot

If the author is making it public then it's technically White Hat hacking and it's now up to the company (if they care enough) to resolve this exploit which potentially many others are using.