Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

CoSchedule: Unauthorized Access to Sensitive Data Exposed

CVE-2025-60119 · published 1 year ago
Summary

A security flaw in CoSchedule versions 3.3.10 and earlier allows unauthorized users to access sensitive system information. This could potentially allow attackers to view confidential data. Update to CoSchedule 3.3.11 or later to fix this issue.

Original advisory text
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects ...
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects CoSchedule: from n/a through <= 3.3.11.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere
Timeline
Published26 Sep 2025
Updated31 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-60119 · NVD
Track software like this
Free during beta