CVE-2022-34775

CVE-2022-34775 describes an excessive data exposure vulnerability in Tabit's reservation management system. An unauthenticated attacker can leverage a publicly accessible API endpoint, exposed via a tiny URL, to retrieve sensitive customer data including names, contact information, visit history, and spending habits by knowing a reservation ID and organization ID. This vulnerability carries a CVSS score of 7.5 (HIGH) due to its network-based attack vector, low attack complexity, and high confidentiality impact, enabling potential phishing attacks. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.