This vulnerability in SourceCodester Online Examination & Learning Management System 1.0 involves an authorization bypass in the view_students.php file. Specifically, manipulation of the class_group argument leads to bypassing authorization controls. The attack vector is network-based, requires low attack complexity, no privileges, and no user interaction. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity). No official patch or remediation guidance is currently available.

Successful exploitation allows an attacker to bypass authorization controls remotely, potentially gaining unauthorized access to student information or other restricted data managed by the system. The exact impact on confidentiality, integrity, or availability is not detailed beyond the authorization bypass.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected view_students.php functionality and monitor for suspicious activity related to manipulation of the class_group parameter.