This vulnerability affects SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The issue is due to improper access controls in an unknown function of the /index.php file, specifically in the Student Self-Registration Endpoint component. Remote exploitation is possible without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and low to low impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available.

An attacker can remotely exploit this vulnerability to bypass access controls in the student self-registration functionality, potentially leading to unauthorized access or actions within the system. The exact impact on confidentiality, integrity, or availability is rated low to low, but unauthorized access could allow manipulation or disclosure of sensitive student data or system functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected endpoint or implementing additional access control measures if possible.