This vulnerability in cmoreira Team Showcase (versions before 25.05.13) involves improper control over code generation, leading to a code injection issue. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges, without user interaction. The impact is limited to a confidentiality loss, with no integrity or availability impact reported. No official patch or vendor advisory details are provided in the available data.

The vulnerability allows an attacker with low privileges to remotely inject code, potentially leading to unauthorized disclosure of information (confidentiality impact). There is no reported impact on data integrity or system availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting network access to the affected service and applying any available workarounds recommended by the vendor.