Food Order Management System
Monthly
Missing authorization in the Admin Endpoint of SourceCodester Food Order Management System 1.0 allows remote attackers to invoke administrative functionality without valid admin credentials, with limited confidentiality, integrity, and availability impact. Publicly available exploit code exists, making the issue practical wherever the admin interface is network-exposed; no CISA KEV listing or confirmed active exploitation was provided at time of analysis. Because the vulnerable function is unnamed, defenders should confirm the affected admin route using the published PoC before tuning detections.
Missing authorization in the Admin Endpoint of SourceCodester Food Order Management System 1.0 allows remote attackers to invoke administrative functionality without valid admin credentials, with limited confidentiality, integrity, and availability impact. Publicly available exploit code exists, making the issue practical wherever the admin interface is network-exposed; no CISA KEV listing or confirmed active exploitation was provided at time of analysis. Because the vulnerable function is unnamed, defenders should confirm the affected admin route using the published PoC before tuning detections.