This vulnerability in Masteriyo - LMS allows an attacker with low privileges to remotely access sensitive system information embedded within the application. The exposure of such data could aid further attacks or information gathering. The affected versions include all releases up to 2.0.3. There is no indication of known exploits in the wild or a vendor patch available at this time. The CVSS vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

The vulnerability leads to unauthorized disclosure of sensitive system information, which can compromise confidentiality. There is no direct impact on system integrity or availability. The exposure could facilitate further targeted attacks if exploited. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, restrict access to the LMS to trusted users and networks to reduce risk.