This vulnerability in gedelumbung HospitalManagement up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8 involves improper handling in the error_reporting function within index.php, leading to information disclosure. The flaw can be triggered remotely without authentication. The project follows a rolling release model, making it difficult to specify exact affected versions. The issue was reported early but remains unaddressed by the vendor. Public exploit details are available, but no known active exploitation in the wild has been reported.

Successful exploitation can lead to unauthorized disclosure of sensitive information via the error_reporting mechanism in the HTTP response. This could potentially aid attackers in further reconnaissance or exploitation steps. No privilege or integrity impact is indicated. The vulnerability is remotely exploitable without user interaction or authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. In the meantime, consider disabling or restricting error reporting in production environments to reduce information leakage risk.