A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. This impacts the fun…

A vulnerability has been identified in OUSL-GROUP-BrinaryBrains School Student Management System affecting the sign_auth_cookie function in Login.php. The vulnerability allows manipulation of the role argument leading to improper authentication bypass. The attack can be launched remotely and exploits have been made publicly available. The vulnerability affects the MY_Controller component and has not received a response from the project maintainers despite early notification. The product uses rolling releases making version tracking unavailable.