CyberSecBulletin

Scheduler vulnerabilities

We track 2 vulnerabilities in Scheduler products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2025.

2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score

Latest Scheduler vulnerabilities

  • 9.3 Critical severity

    Schedule: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-22523Scheduler

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scheduler Schedule schedule allows Blind SQL Injection.This issue affects Schedule: from n/a through <= 1.0.0.

  • 8.8 High severity

    scheduler: Improper Access Control

    CVE-2024-45982Scheduler

    A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accou