Vendor
A publicly disclosed authorization bypass vulnerability in the student-management-system allows remote attackers to access unauthorized student records via manipulated sid parameters.