This vulnerability in Deetronix Booking Ultra Pro allows an attacker with low privileges and network access to retrieve sensitive information embedded in data sent by the application. The issue affects versions up to 1.1.23. The CVSS vector indicates that the attack complexity is low, no user interaction is required, and the impact is on confidentiality only. There is no indication of known exploits in the wild or vendor-provided patches at this time.

The vulnerability can lead to unauthorized disclosure of sensitive information, compromising confidentiality. There is no reported impact on data integrity or system availability. Exploitation requires network access and low privileges, but no user interaction, which could facilitate unauthorized data exposure within affected environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit network exposure of the affected Booking Ultra Pro versions and restrict access to trusted users with minimal privileges. Monitor vendor communications for updates on patches or official mitigations.