CVE-2024-22141 describes an information exposure vulnerability in Cozmoslabs Profile Builder Pro versions up to 3.10.0. This vulnerability allows unauthorized actors to access sensitive information, potentially compromising confidentiality. The CVSS 3.1 base score is 6.5, with an attack vector over the network, low complexity, requiring low privileges but no user interaction. There is no vendor advisory or patch available as of the published date, and no known active exploitation has been reported.

The vulnerability allows unauthorized disclosure of sensitive information, which could lead to privacy breaches or leakage of confidential data. There is no indication of impact on system integrity or availability. The medium severity rating reflects the potential confidentiality impact without direct exploitation evidence.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access privileges to the affected Profile Builder Pro installations and monitor for unusual access patterns. Avoid exposing the affected versions to untrusted networks where possible.