The vulnerability CVE-2024-50512 in Posti Shipping allows generation of error messages that contain sensitive information, potentially exposing embedded sensitive data to unauthorized parties. This affects versions up to and including 3.10.2. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to confidentiality loss. No known exploits are reported in the wild. The product is not a cloud service, and no official patch or remediation guidance is currently provided.

An attacker can obtain sensitive information embedded in error messages, which may lead to information disclosure. The impact is limited to confidentiality with no direct impact on integrity or availability. This could aid an attacker in further reconnaissance or targeted attacks but does not itself allow system compromise or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing detailed error messages in production environments and consider implementing error handling that does not reveal sensitive data. Monitor vendor channels for updates and apply patches promptly once released.