CVE-2025-14206: senior-walter online_student_clearance_system Incorrect Privilege Assignment

Vulnerability summary

CVE-2025-14206 is a high (CVSS 7.5) Incorrect Privilege Assignment vulnerability in senior-walter online_student_clearance_system. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 08-12-2025
   PublishedVulnerability first disclosed.
2. 08-12-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

• CWE-266Incorrect Privilege AssignmentA product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
• CWE-285Improper AuthorizationThe product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.