This looks a lot like bug 893582, which was supposedly fixed in E3. Justin, what version do you reproduce on ?
I'd consider this a vulnerability if it's quite easy to DoS the whole thing. Requiring an authenticated user is not really a high bar of entry :) We have a bunch of those action concurrency issues (tagged "concurrency" for those playing at home), but most (all?) of them were just triggering bugs, not crashes...
This looks a lot like bug 893582, which was supposedly fixed in E3. Justin, what version do you reproduce on ?
I'd consider this a vulnerability if it's quite easy to DoS the whole thing. Requiring an authenticated user is not really a high bar of entry :) We have a bunch of those action concurrency issues (tagged "concurrency" for those playing at home), but most (all?) of them were just triggering bugs, not crashes...