An information disclosure vulnerability exists in Bottinelli Informatica Vedo Suite v1.2.5. A remote attacker can leverage the api_vedo/chat endpoint and the utente_chat parameter to retrieve sensitive information without authorization. Details about the exact nature of the sensitive information or the exploitation method are not provided. No CVSS score or vendor advisory is available to clarify the severity or remediation status.

The vulnerability allows unauthorized remote attackers to obtain sensitive information from the affected application. This could lead to exposure of confidential data, potentially impacting privacy or security depending on the nature of the information disclosed. There is no indication of active exploitation or additional impact such as code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the api_vedo/chat endpoint where possible and monitor for unusual access patterns related to the utente_chat parameter.