This vulnerability, identified as CWE-201, affects Zozothemes Corpkit versions up to 1.0.5. It involves the insertion of sensitive subscriber data into data sent by the application, potentially exposing this information to unauthorized parties. The CVSS 3.1 vector indicates that the attack vector is network-based, requires low privileges, no user interaction, and impacts confidentiality with a high impact rating. There is no information about a patch or official remediation from the vendor at this time.

An attacker with network access and low privileges could exploit this vulnerability to gain access to sensitive subscriber data, compromising confidentiality. There is no indication of impact to integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the affected application and monitor for any suspicious activity related to subscriber data exposure.