Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.3

Schule school management system OTP can be guessed

CVE-2025-48372 · published 1 year ago
Summary

The school management software generates a four‑digit one‑time password, giving only about nine thousand possible codes. Because the code set is so small, an attacker can try many combinations quickly and potentially gain access if the system does not limit attempts. Upgrade to version 1.0.1, which uses a longer, more secure code, and ensure login attempts are limited.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
schule111 schule_school_management_system 1.0.0
cpe:2.3:a:schule111:schule_school_management_system:1.0.0:*:*:*:*:*:*:*
Original advisory text
Schule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks
Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) results in only 9000 possible combinations. This small keyspace makes the OTP highly vulnerable to brute-force attacks, especially in the absence of strong rate-limiting or lockout mechanisms. Version 1.0.1 fixes the issue.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.3 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-521Weak Password Requirements
Timeline
Published22 May 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-48372 · NVD
CVE-2025-48372 · OSV
GHSA-6c48-67xx-vqgc · GHSA
Track software like this
Free during beta