This vulnerability affects SourceCodester Online Boat Reservation System 1.0 and is due to improper authorization checks in an unspecified administrative endpoint. Remote attackers can exploit this flaw to bypass authorization controls, potentially gaining unauthorized access or performing unauthorized actions. Multiple endpoints within the administrative functionality are impacted. The CVSS 4.0 base score is 5.3, indicating a medium severity level. There is no vendor advisory or patch information available at this time, and no known exploits are reported in the wild.

The improper authorization vulnerability allows remote attackers with low privileges to access or manipulate administrative functions without proper permission. This could lead to unauthorized administrative actions within the affected system. The exact impact depends on the administrative capabilities exposed by the vulnerable endpoints.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to administrative endpoints through network controls or other access restrictions where possible.