The vulnerability was identified in version 1.0 of SourceCodester Food Order Management System. An unknown function of the Admin Endpoint allows an attacker to perform operations without proper authorization, effectively bypassing access controls. This flaw can expose sensitive administrative data and enable further malicious actions. The weakness aligns with CWE-862 (Missing Authorization) and CWE-863 (Improper Authorization).

Affected systems include the SourceCodester Food Order Management System, version 1.0. The specific impacted component is the Admin Endpoint, though the exact function within that endpoint is not detailed.

The CVSS score of 6.9 indicates a medium to high severity due to remote attack potential and missing authorization. EPSS is not available, so exact exploitation probability cannot be assessed, but the exploit is publicly known, indicating the possibility of automated attacks. The vulnerability is not listed in the CISA KEV catalog, suggesting it is not part of a known large-scale exploitation campaign. Attackers can target the system from any remote network location where the Admin Endpoint is accessible.