An unauthenticated remote attacker can gain full administrative control over the Tourism-Management-System by exploiting an incorrect default role assignment during user registration.

The application exposes an unauthenticated registration endpoint at /users/register that fails to enforce role restrictions, allowing any user to register with the default administrative role defined in the underlying database schema.

Successful exploitation results in a total compromise of the application, as an attacker can register an administrative account without any prior authentication. This level of access grants the attacker full control over management functions, leading to unauthorized data access, potential system configuration changes, and complete loss of application integrity. While the provided CVSS score is 7.3, the functional impact of gaining administrative access represents a critical risk to the organization.

Immediate Action: Apply the vendor-provided patch (commit 84d8ec384f669df3985293dab293bb7b477efa64) to the source code immediately to restrict the registration process and prevent default administrative privilege assignment.

Proactive Monitoring: Review application access logs for unusual registration patterns or spikes in administrative user account creation.

Compensating Controls: Deploy a Web Application Firewall (WAF) to restrict access to the /users/register endpoint if immediate patching is not feasible, or manually update the database schema to ensure the default role for new users is set to a restricted level rather than administrative.

Public Exploit Available: Yes, a functional proof-of-concept and technical reproduction steps are available in the public GitHub issue tracker (Issue #10).

Given the ease with which an attacker can gain administrative access, this vulnerability must be treated with high urgency. Administrators should prioritize applying the referenced patch to the codebase and auditing all existing user accounts to identify and remove any unauthorized administrative users created through this flaw.