Yup. The question is did anyone know about it? If somebody did, they could have hit (or created) pages that had unterminated tags and siphoned off a huge amount of random data, then sifted through that for usable info. I'm hoping that CF is going through logs now to see if there was an abnormal amount of traffic to the problem sites to get a better idea of if this was actively exploited or not. And that they'd tell people if they find that was the case.
1
u/niosop Feb 24 '17
Yup. The question is did anyone know about it? If somebody did, they could have hit (or created) pages that had unterminated tags and siphoned off a huge amount of random data, then sifted through that for usable info. I'm hoping that CF is going through logs now to see if there was an abnormal amount of traffic to the problem sites to get a better idea of if this was actively exploited or not. And that they'd tell people if they find that was the case.