Tumblr discloses vulnerability but says 'no evidence that this bug was abused'

Bug hunter finds security flaw in Tumblr's "Recommended Blogs" widget.