CVE-2025-60305 describes an incorrect access control vulnerability in SourceCodester Online Student Clearance System 1.0. Due to a logic flaw, users with low privileges can escalate their access by forging sessions with high privileges, enabling them to execute sensitive operations that should be restricted. This vulnerability corresponds to CWE-284 (Improper Access Control) and has a high impact on confidentiality, integrity, and availability as indicated by the CVSS vector. There is no evidence of known exploits in the wild, and no patch or official remediation has been published to date.

Exploitation of this vulnerability allows attackers with low privilege access to impersonate high privilege users, potentially leading to unauthorized access to sensitive data, modification of critical information, and disruption of system availability. The CVSS score of 8.8 reflects a high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users only and monitor for suspicious activity related to privilege escalation attempts. Avoid deploying this system in untrusted environments.