This vulnerability affects the backend endpoints of SourceCodester Indian Invoicing System 1.0, where improper access controls can be bypassed through remote manipulation. The exact backend functions impacted are unspecified. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no user interaction, and limited impact on confidentiality, integrity, and availability. Multiple endpoints are affected, increasing the attack surface. No official remediation or patch information is provided, and the product is not a cloud service.

Successful exploitation could allow remote attackers to bypass access controls on backend endpoints, potentially leading to unauthorized access or actions within the invoicing system. The impact on confidentiality, integrity, and availability is limited but present. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected system where possible and monitor for unusual activity related to backend endpoints. Avoid exposing the affected version (1.0) to untrusted networks.