This vulnerability in SourceCodester Online Boat Reservation System 1.0 affects an unknown administrative functionality, resulting in improper authorization. The flaw allows remote attackers to bypass intended access controls on multiple endpoints. The CVSS 4.0 base score is 5.3, reflecting a medium severity with network attack vector, low complexity, no user interaction, and limited impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but no known exploits are reported in the wild. No vendor-provided patch or mitigation details are available at this time.

Successful exploitation could allow an attacker with low privileges to gain unauthorized access to administrative functions, potentially leading to unauthorized actions within the system. The impact on confidentiality, integrity, and availability is limited but non-negligible given administrative access implications. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to administrative endpoints through network controls and monitor for suspicious activity related to authorization bypass attempts. Avoid exposing administrative interfaces to untrusted networks.