This vulnerability affects SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0. It is caused by improper access controls in an unknown function of the /index.php file related to the Student Self-Registration Endpoint. The flaw allows remote exploitation without requiring privileges or user interaction, potentially enabling unauthorized access or actions. The CVSS 4.0 base score is 6.9, indicating a medium severity level. No vendor advisory or patch information is provided, and the vulnerability is not related to a cloud service. There are no known exploits in the wild at this time.

The vulnerability could allow remote attackers to bypass access controls on the Student Self-Registration Endpoint, potentially leading to unauthorized access or manipulation of the system. The impact is rated medium based on the CVSS score of 6.9. There is no indication of privilege escalation or user interaction required, increasing the risk of exploitation. However, the exact consequences depend on the functionality of the affected endpoint, which is unspecified.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, organizations using version 1.0 of this product should monitor vendor communications closely. Until a patch is available, consider restricting access to the affected endpoint if possible or implementing compensating controls to limit exposure.