The observable discrepancy vulnerability in Softtr Informatics Trading Limited Company's E-Commerce Pack allows account footprinting. An attacker can exploit response differences to confirm the existence or non‑existence of user accounts, thereby enabling targeted credential guessing or enumeration attacks. This weakness is classified as CWE‑203 and primarily threatens the confidentiality of user identities.

Softtr Informatics Trading Limited Company's E-Commerce Pack, all releases before 5.03.01.54. No further sub‑version detail is available, so any deployment of versions earlier than this should be considered affected pending a vendor fix.

The CVSS score of 5.3 indicates a medium severity. The EPSS score is < 1%, indicating a very low but nonzero likelihood of exploitation. The vulnerability is not listed in CISA's KEV catalog, suggesting it has not yet been widely imported or used in malicious attacks. The likely attack vector is remote via the public web interface or API of the e‑commerce application. An attacker would craft requests that elicit different responses based on whether an account exists, then observe these discrepancies to enumerate valid usernames or email addresses.