This vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows an attacker to retrieve embedded sensitive data without authentication or user interaction. It affects versions up to and including 4.2.8.3. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality loss, with no integrity or availability impact reported. No vendor advisory or patch information is currently available, and the product is not a cloud service.

An attacker can remotely access sensitive system information embedded within the EventPrime application without any privileges or user interaction. This exposure could lead to information disclosure that may aid further attacks or reconnaissance. There is no reported impact on data integrity or system availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, limit exposure by restricting network access to the affected application where possible.