Threats tagged 'ghsa-3g88-37vp-qh92'

A medium severity information disclosure vulnerability (CWE-200) exists in the arnobt78 Hotel Booking Management System up to commit f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The issue is located in an unknown function within the /api/health/detailed health check endpoint. Remote attackers can exploit this vulnerability without authentication to obtain sensitive information. The product uses a rolling release model, so specific affected versions are not provided. The vendor has not responded to disclosure attempts, and no patch or remediation information is currently available. Public exploit code exists but no known active exploitation in the wild has been reported.