SourceCodester Student Grades Management System 1.0 contains a CSRF vulnerability that enables remote attackers to perform unauthorized actions by exploiting the lack of proper request validation. The vulnerability does not require privileges or user interaction beyond tricking the user to submit a crafted request. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and low impact on integrity. No official patch or temporary fix is currently documented.

Successful exploitation could allow attackers to perform unauthorized operations on behalf of authenticated users, potentially altering data or system state within the Student Grades Management System. The impact is rated medium severity with limited integrity impact and no confidentiality or availability impact reported. Public exploit code availability increases the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as anti-CSRF tokens or request validation mechanisms. Monitoring for suspicious activity related to unauthorized requests is advisable. No vendor-provided mitigation or official fix is currently documented.