A weakness in SourceCodester Inventory Management System 1.0 affects the password recovery functionality in the file /model/user/resetPassword.php. This vulnerability allows remote attackers to manipulate the password recovery process, potentially leading to weak password recovery. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 5.3.