This vulnerability (CVE-2024-37504) in the Ninja Team FileBird Document Library allows unauthorized actors to access sensitive information. It affects versions through 2.0.6. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The weakness is classified under CWE-200, indicating exposure of sensitive information. No official fix or patch has been published yet, and no known exploits have been reported.

The impact is limited to unauthorized disclosure of sensitive information without integrity or availability impact. Attackers can gain access to data that should be protected, potentially leading to privacy or confidentiality concerns. There is no evidence of active exploitation or further impact such as system compromise or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should restrict access to the affected FileBird Document Library installations and monitor for any suspicious activity related to information disclosure. Follow vendor channels for updates on fixes or mitigations.