> can you really call that a vulnerability? Yes. Just because executing the attack doesn't seem to get you anything particularly valuable doesn't make it "not

> can you really call that a vulnerability? Yes. Just because executing the attack doesn't seem to get you anything particularly valuable doesn't make it "not a vulnerability." We're not personally insulting it, we're just describing reality.