This vulnerability in Sovlix MeetingHub allows an attacker with low privileges and network access to insert sensitive information into data sent by the application, which can then be retrieved. The issue affects versions up to and including 1.23.9. The CVSS 3.1 vector indicates that the attack can be performed remotely over the network with low complexity and privileges, no user interaction is needed, and the confidentiality impact is high while integrity and availability remain unaffected. No known exploits are reported in the wild, and no vendor patch or advisory has been provided at this time.

An attacker with low privileges and network access can exploit this vulnerability to retrieve embedded sensitive information from data sent by Sovlix MeetingHub. This results in a high confidentiality impact, potentially exposing sensitive data. There is no impact on data integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to Sovlix MeetingHub instances to trusted users with appropriate privileges to reduce risk.