According to this post (https://infosec.pub/post/53919558), Amazon saw this exploited in the wild on the 17th of Oct - ~4 days prior to the coordinated disclosure.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments