Vulnerabilities

TI-2026-28342 CVE-2026-39354

Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/ask

MEDIUM 62

Scoold is a Q&A and a knowledge sharing platform for teams.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00215 Published 2026-04-07 Fixed in 1.66.2 CWE-639

TI-2026-27076 CVE-2026-34832

MEDIUM 62

Scoold is a Q&A and a knowledge sharing platform for teams.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00315 Published 2026-04-02 Fixed in 1.66.1 CWE-639

TI-2024-33769 CVE-2024-50334

MEDIUM 46

Scoold is a Q&A and a knowledge sharing platform for teams.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01035 Published 2024-10-29 Fixed in 1.64.0 CWE-288

TI-2022-01415 CVE-2022-1543 · GHSA-q6f4-32m8-8m5c

MEDIUM 40

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01114 Published 2022-04-29 Fixed in 1.49.4 CWE-130

TI-2021-21201 CVE-2021-46372 · GHSA-w8c5-qvm6-2h83

LOW 25

Scoold 1.47.2 is a Q&A/knowledge base platform written in Java.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00569 Published 2022-02-18 No fix listed CWE-79