This vulnerability in o2oe E-Invoice App Malaysia (versions up to 1.3.0) exposes sensitive system information to unauthorized actors. The issue allows retrieval of embedded sensitive data without authentication or user interaction, potentially leaking confidential information. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges required. The vulnerability affects confidentiality only, with no impact on integrity or availability. No official patch or vendor advisory details are provided at this time.

An attacker can remotely access sensitive system information embedded within the application without needing privileges or user interaction. This exposure could lead to information disclosure that may aid further attacks or compromise privacy. There is no impact on system integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit exposure by controlling network access to the affected application and monitor for unusual access patterns related to sensitive data retrieval.