Incorrect Access Control in SourceCodester Online Student Clearance System
CVE-2025-60305
Currently unrated
Key Information:
- Vendor
SourceCodester
- Vendor
- CVE Published:
- 10 October 2025
What is CVE-2025-60305?
The Online Student Clearance System by SourceCodester is prone to a vulnerability that arises from a logic flaw in its access control mechanisms. This vulnerability enables users with low privileges to create forged sessions, which could allow them to carry out sensitive operations typically reserved for high-privileged accounts. Such weaknesses can lead to unauthorized access and manipulation of data, increasing the risk of serious security incidents.