This vulnerability affects SourceCodester Pet Grooming Management Software 1.0 and involves an information exposure flaw in an unknown function within the /admin/ directory. The flaw allows remote attackers to access file and directory information without authentication or user interaction. The CVSS 4.0 base score is 6.9 (medium), reflecting network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability has been publicly disclosed with an exploit published, but no vendor fix or mitigation has been provided yet.

Successful exploitation results in unauthorized disclosure of file and directory information on the affected system. This could aid attackers in further reconnaissance or exploitation but does not directly allow code execution or system compromise according to the available data. There are no reported active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the /admin/ directory and implementing network-level controls to limit exposure may reduce risk.