The initial blog post with more of the technical detail is here:

https://cybergibbons.com/security-2/serious-issues-in-nurser...