Comment 1 for bug 1301323

To clarify - there is currently no known way to exploit this, the security issue is how we fix bug #1300734 without opening a security hole ref point (3) above.

So it could be argued that this is not a vulnerability as such, due to the fact that the current implementation doesn't work.

If folks would prefer we can open this to public security, I just wanted to get some initial feedback as a precaution rather than assuming it should be public.