This vulnerability in sambitraj STUDENT-MANAGEMENT-SYSTEM up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 involves improper access controls in an unspecified function within the Dashboard component. The flaw enables remote attackers to manipulate access permissions, potentially gaining unauthorized access to multiple endpoints. The product's rolling release nature means versioning details are not fixed, and the vendor has not responded to the issue report or provided remediation guidance. The CVSS 4.0 score is 6.9, indicating medium severity with network attack vector, low complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

The vulnerability allows remote attackers to bypass access controls in the Dashboard component, potentially accessing or manipulating data or functionality that should be restricted. This could lead to unauthorized information disclosure or modification within the affected system. However, the impact is rated medium, reflecting limited but significant risk. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for updates from the vendor. Until a fix is released, consider restricting access to the Dashboard component and implementing additional access control measures where possible to reduce exposure.