This vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 involves an authorization bypass caused by improper validation of the ID parameter in the /index.php?action=view_student POST handler. An attacker can manipulate this parameter to bypass authorization controls and access restricted resources remotely. The vulnerability is publicly disclosed but no known exploits are reported in the wild. No vendor-provided patch or fix has been documented as of the publication date.

Successful exploitation allows an attacker with network access and low privileges to bypass authorization controls and potentially view or interact with student data without proper permissions. This could lead to unauthorized data disclosure or modification within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoint and monitor for suspicious activity related to manipulation of the ID parameter. Implement additional access controls or input validation if possible.