The vulnerability in mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be is due to missing authentication checks in an unknown function within loginlinkstudent.php. Manipulating the 'umail' parameter can bypass authentication controls, enabling remote exploitation. The product follows a rolling release approach, so no fixed versions or patches have been publicly identified. The vendor was contacted but did not provide any response or remediation guidance. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to limited impacts on confidentiality, integrity, and availability.

An attacker can remotely bypass authentication controls by manipulating the 'umail' argument in the loginlinkstudent.php file, potentially gaining unauthorized access. The impact is rated medium with limited confidentiality, integrity, and availability consequences. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is publicly available, users should monitor official channels for updates. Until a fix is provided, consider restricting access to the vulnerable endpoint or implementing additional authentication controls externally if feasible.