This vulnerability in Premio Chaty allows an attacker to insert sensitive information into data sent by the application, which can then be retrieved by unauthorized parties. It affects all versions up to and including 3.5.1. The CVSS vector indicates that the attack can be performed remotely over the network without authentication or user interaction, and it results in a high confidentiality impact. No integrity or availability impacts are noted. No patch or official remediation information is provided in the available data.

Successful exploitation could lead to unauthorized disclosure of sensitive information embedded in sent data, compromising confidentiality. There is no indication of impact on data integrity or system availability. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Premio's official channels for updates. Until a fix is available, consider limiting exposure of sensitive data through the affected application and applying any recommended configuration changes from the vendor if available.