CVE-2023-0905

CVE-2023-0905 is a critical improper authentication vulnerability affecting SourceCodester Employee Task Management System 1.0, specifically within the changePasswordForEmployee.php file. This flaw allows for remote exploitation with low attack complexity, potentially leading to unauthorized access or manipulation of employee accounts, though it does not impact confidentiality or availability. While there is no evidence of active exploitation, a public exploit is available on ExploitDB, and the vulnerability has a high FAUCET Risk Score of 89/100. Despite the public exploit, there is minimal community discussion or media coverage surrounding this CVE.