This vulnerability in Mail Mint allows unauthorized retrieval of embedded sensitive data due to improper exposure of system information. It is identified as CWE-497 and affects versions through 1.19.5. The CVSS 3.1 base score is 4.3, indicating a medium severity issue exploitable remotely with low complexity and low privileges. No official fix or patch is currently available, and no exploits have been observed in the wild. The vulnerability does not affect cloud services and is limited to the product versions specified.

The vulnerability allows unauthorized actors to retrieve sensitive system information, potentially leading to information disclosure. The impact is limited to confidentiality (C:L) with no reported impact on integrity or availability. This could aid attackers in reconnaissance or further attacks but does not directly compromise system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, limit exposure by restricting network access to the affected Mail Mint instances and review system configurations to minimize sensitive data exposure.