This vulnerability involves a directory traversal flaw in Easy Chat Server version 3.1. An attacker can exploit the UserName parameter to traverse directories, potentially gaining access to sensitive information and executing arbitrary code remotely. The CVSS vector indicates the attack requires no privileges or user interaction and can be performed over the network with low attack complexity. There is currently no vendor advisory or patch information available.

Successful exploitation could lead to unauthorized disclosure of sensitive information and remote code execution on the affected server. This can compromise the confidentiality and integrity of the system, but does not impact availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected service and monitor for suspicious activity related to the UserName parameter. Avoid exposing the service directly to untrusted networks if possible.