Thx for the heads up!
Just patched my prod. IIS server
Your post is actually the first "warning" I saw about the vuln. (Not that I didn't see it elsewhere just after, but AO being pretty much the first place I check when online, such "heads up"s can only help bugs visibility and awareness.

Ammo