Finding an SOQL Injection 0-Day in Salesforce

How an un-exploitable SOQL injection turned into a 0-day in Salesforce itself affecting millions of user records