This vulnerability involves improper neutralization of special elements used in SQL commands within the Libro de Reclamaciones y Quejas application by Renzo Tejada. It allows SQL Injection attacks, which can be exploited by an attacker with high privileges to impact confidentiality (high impact) and availability (low impact) of the system. The affected versions are from initial releases through version 0.9. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required high privileges, no user interaction, and scope change.

Successful exploitation could lead to unauthorized disclosure of sensitive information (high confidentiality impact) and partial denial of service (low availability impact). Integrity impact is not affected. The attacker must have high privileges to exploit this vulnerability, which limits the attack surface somewhat but still poses a significant risk if such access is obtained.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict high-privilege access to the affected application and consider additional input validation or web application firewall rules to mitigate SQL Injection risks.