This vulnerability in the ningzichun Student Management System involves an information disclosure flaw in an unspecified function within the Backup Handler component, specifically related to the file example.7z. The flaw allows remote attackers to obtain sensitive information without requiring privileges or user interaction. The system employs continuous delivery with rolling releases, making it difficult to identify exact affected or patched versions. The vendor has been notified but has not issued any advisory or remediation guidance. The vulnerability has a CVSS 4.0 score of 6.9, reflecting a medium severity level.

Successful exploitation leads to unauthorized information disclosure, potentially exposing sensitive data managed by the Student Management System. The attack can be performed remotely without authentication or user interaction, increasing the risk of exposure. However, there is no indication of privilege escalation, integrity, or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, monitor the vendor's channels for updates. In the meantime, consider restricting external access to the Backup Handler component or the example.7z file if possible to reduce exposure.