The cnilsson iCafe Library versions up to 1.8.3 contain an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. This allows an attacker with high privileges to potentially manipulate SQL queries, impacting the confidentiality and availability of the affected system. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and scope change. The vulnerability does not currently have a publicly known exploit or patch.

Successful exploitation could lead to unauthorized disclosure of sensitive information (confidentiality impact) and partial disruption of service (availability impact). Integrity is not impacted according to the CVSS vector. The requirement for high privileges limits the attack surface to users with elevated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to high-privilege accounts and monitor for suspicious activity related to SQL query manipulation. Avoid exposing the vulnerable library in untrusted environments.