Vulnerability · Published May 22, 2025 · Assigned by GitHub_M

CVE-2025-48372Schule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks

Medium 6.6

In plain English

A medium-severity security flaw in Schule from schule111. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 4.0)6.6Medium

Exploit odds (30 days)0.3%top 79.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) results in only 9000 possible combinations. This small keyspace makes the OTP highly vulnerable to brute-force attacks, especially in the absence of strong rate-limiting or lockout mechanisms. Version 1.0.1 fixes the issue.

Affected products (as reported)

Vendor	Product	Versions
schule111	Schule	< 1.0.1

Weakness: CWE-521 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

References

https://github.com/schule111/Schule/security/advisories/GHSA-6c48-67xx-vqgc x_refsource_CONFIRM
https://github.com/schule111/Schule/commit/cd53abbea93943f2c60a5281d45bebadc57636b7 x_refsource_MISC