This vulnerability in HashThemes Hash Elements allows an attacker with low privileges and no user interaction required to retrieve embedded sensitive system data, exposing information that should remain confidential. The CVSS 3.1 base score is 4.3, reflecting a low complexity attack vector over the network with limited confidentiality impact and no integrity or availability impact. The affected versions include all versions up to 1.5.4, though exact affected versions are not explicitly enumerated. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

The vulnerability exposes sensitive system information to unauthorized parties, potentially aiding attackers in further reconnaissance or targeted attacks. However, the impact is limited to confidentiality with no direct integrity or availability consequences. The attack requires low privileges but no user interaction, making it moderately accessible to attackers with some access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit exposure by restricting access to the affected Hash Elements component and monitor for unusual access patterns. Avoid deploying this component in sensitive environments without additional compensating controls.