Is API Developer Portal vulnerable to CVE-2017-9805?