What's the issue with that version of OWA?

AFAIK, there's no way that this could have lead to a hack.