This vulnerability in ningzichun student-management-system up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf involves improper authorization checks in the user/editLog.php file. By manipulating the parameters sid, addtime, type, reason, detail, and logdate, an attacker can bypass authorization mechanisms remotely. The vulnerability was reported early to the project but no response or patch has been provided. The CVSS 4.0 score is 6.9, indicating a medium severity issue. No known exploits are currently observed in the wild.

An attacker can remotely bypass authorization controls in the affected system, potentially allowing unauthorized access or modification of user log data. This could lead to unauthorized actions being performed within the student-management-system. The exact impact depends on the privileges granted by the bypassed authorization but is significant enough to warrant concern given the medium CVSS score.

No official fix or patch has been released by the vendor as of the current information. Since the project has not responded yet, users should monitor the vendor's announcements for updates. Until a patch is available, consider restricting access to the affected functionality or implementing additional access controls at the network or application level to mitigate unauthorized access.