This vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 involves an authorization bypass caused by improper validation of the 'ID' parameter in the /index.php?action=view_student POST handler. Attackers can manipulate this parameter to bypass authorization controls and access restricted student information remotely. The vulnerability is publicly disclosed but no known exploits in the wild have been reported. No official fix or mitigation has been provided by the vendor as of the publication date.

Successful exploitation allows an attacker with low privileges to bypass authorization controls and access potentially sensitive student data remotely. This could lead to unauthorized data disclosure within the affected system. The vulnerability does not require user interaction and has low complexity to exploit, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected endpoint and monitor for suspicious activity related to manipulation of the 'ID' parameter. Implement additional access control checks if possible to mitigate unauthorized access.