This vulnerability in INFINITUM FORM Geo Controller allows an attacker to insert sensitive information into data sent by the application, which can then be retrieved. The affected versions include all versions up to 8.9.4. The CVSS vector indicates the attack can be performed remotely without authentication or user interaction, with impact limited to confidentiality (low). No integrity or availability impacts are noted. No known exploits are reported in the wild, and no patch or remediation details are currently available.

An attacker could remotely cause sensitive information to be embedded in data sent by the Geo Controller, potentially exposing confidential data to unauthorized parties. The impact is limited to confidentiality with no reported effects on integrity or availability. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor vendor communications for updates. Until a fix is available, consider restricting network access to the affected Geo Controller instances if feasible.