What a terrible article. Apparently the "0-day" is that the software can be configured by the user to point to a different backend, and that somebody with bad intentions could possibly convince a user to do that.