Incorrect Access Control in SourceCodester Online Student Clearance System
CVE-2025-60305 
8.8HIGH
Key Information:
- Vendor
 SourceCodester
- Vendor
 - CVE Published:
 - 10 October 2025
 
What is CVE-2025-60305?
The Online Student Clearance System by SourceCodester is prone to a vulnerability that arises from a logic flaw in its access control mechanisms. This vulnerability enables users with low privileges to create forged sessions, which could allow them to carry out sensitive operations typically reserved for high-privileged accounts. Such weaknesses can lead to unauthorized access and manipulation of data, increasing the risk of serious security incidents.
