Read the docs
TI-2025-30701 Aliases CVE-2025-48375

Schule Missing Rate Limiting on OTP Email Requests – Susceptible to Abuse & DoS

Priority HIGH 68CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-770.

Summary

Schule is open-source school management system software. Prior to version 1.0.1, the file forgot_password.php (or equivalent endpoint responsible for email-based OTP generation) lacks proper rate limiting controls, allowing attackers to abuse the OTP request functionality. This vulnerability can be exploited to send an excessive number of OTP emails, leading to potential denial-of-service (DoS) conditions or facilitating user harassment through email flooding. Version 1.0.1 fixes the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00441 38th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Schule (schule111): 1.0.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
schule111Schulebefore 1.0.11.0.1Patch availableCNA
  • Schule Vendorschule111 Affected before 1.0.1 Fixed in 1.0.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:schule111:schule_school_management_system:1.0.0:*:*:*:*:*:*:*1.0.0Vulnerableschule111
  • cpe:2.3:a:schule111:schule_school_management_system:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·schule111

Remediation

  • Fix · CNA Schule (schule111) Fixed in 1.0.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-48375

References

Exploit 1

  • TI-2025-30699 Schule Has Client-Side Role-Based Access Control (RBAC) Bypass Vulnerability CVSS 4.0MEDIUM 6.6
  • TI-2025-30698 Schule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks CVSS 4.0MEDIUM 6.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences