This vulnerability in sfturing hosp_order up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 involves the getProperties function in ssm_pro/src/main/java/cn/sfturing/utils/MailUtil.java. Manipulating this function results in sensitive information being transmitted in cleartext. The attack vector is network-based with high attack complexity and no privileges or user interaction required. Exploit code has been publicly disclosed, but no known exploits are reported in the wild. Due to continuous delivery with rolling releases, no specific affected or fixed versions are identified. The vendor has been notified but has not yet issued a fix or advisory.

Sensitive information may be exposed during transmission in cleartext, potentially allowing an attacker to intercept confidential data remotely. The difficulty of exploitation is high, and no privilege or user interaction is needed. The vulnerability could lead to information disclosure but does not indicate further impacts such as system compromise or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should monitor official channels for updates. Until a fix is provided, consider mitigating exposure by restricting network access to affected components or using secure transport mechanisms externally if possible.