The vulnerability identified as CVE-2024-50528 affects Stacks Mobile App Builder versions up to 5.2.3. It involves the exposure of sensitive system information to an unauthorized control sphere, enabling attackers to retrieve embedded sensitive data without authentication or user interaction. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and a high confidentiality impact. There is no indication of integrity or availability impact. No known exploits in the wild have been reported, and no official patch or vendor advisory has been provided in the available data.

An attacker can remotely access sensitive system information embedded within the Stacks Mobile App Builder application without any privileges or user interaction. This exposure could lead to confidentiality breaches, potentially aiding further attacks or information leakage. There is no evidence of impact on system integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided in the available data, users should monitor for updates from Stacks and apply any official fixes once available. Until then, restrict access to the affected application and limit exposure to untrusted networks where possible.