CyberSecBulletin

Schule111 vulnerabilities

We track 2 vulnerabilities in Schule111 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2025.

2vulnerabilities
1critical
1high
0exploited
8.2average CVSS score

Latest Schule111 vulnerabilities

  • 9.1 Critical severity

    Schule: Incorrect Authorization

    CVE-2025-48373Schule111

    Schule is open-source school management system software. The application relies on client-side JavaScript (index.js) to redirect users to different panels based on their role. Prior to version 1.0.1, this implementation poses a serious security risk because it

  • 7.3 High severity

    Schule: Weak Password Requirements

    CVE-2025-48372Schule111

    Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) re