This vulnerability affects the ajax_forgot_password function in the Login.php controller of the OUSL-GROUP-BrinaryBrains School Student Management System up to commit 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Manipulating the email parameter in the password recovery endpoint results in weak password recovery controls, potentially allowing unauthorized password reset attempts. The attack vector is network-based with high attack complexity and no privileges or user interaction required. The vulnerability is publicly disclosed with no official vendor remediation or patch available at this time.

An attacker can remotely exploit this vulnerability to bypass or weaken the password recovery process, potentially allowing unauthorized access to user accounts. The attack complexity is high, which may limit exploitation likelihood. There is no indication of privilege escalation or direct system compromise beyond the password recovery weakness. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, organizations should consider implementing compensating controls such as monitoring password recovery requests for anomalies, enforcing strong email verification processes, or temporarily disabling the vulnerable password recovery endpoint if feasible until an official fix is released.