Schule vulnerabilities

2 known vulnerabilities in Schule from Schule111. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Schule: Incorrect Authorization

  CVE-2025-48373May 22, 2025Schule111

  Schule is open-source school management system software. The application relies on client-side JavaScript (index.js) to redirect users to different panels based on their role. Prior to version 1.0.1, this implementation poses a serious security risk because it

• 7.3 High severity

  Schule: Weak Password Requirements

  CVE-2025-48372May 22, 2025Schule111

  Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) re