Erudika Scoold
11 CVEs affecting Erudika Scoold. Latest disclosed: 2026-10-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1543 | High | 8.8 | 2022-04-29 | Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentar… |
CVE-2026-42176 | Medium | 6.7 | 2026-05-08 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scoold allows the admins configuration value to be modified through /api/c… |
CVE-2026-54677 | Medium | 6.5 | 2026-09-17 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in q… |
CVE-2026-54676 | Medium | 6.5 | 2026-09-17 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve replies from questions in private spac… |
CVE-2026-39354 | Medium | 6.5 | 2026-04-07 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.66.2, an authenticated authorization flaw in Scoold allows any logged-in, low-privilege… |
CVE-2026-34832 | Medium | 6.5 | 2026-04-02 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.66.1, Scoold contains an authenticated authorization flaw in feedback deletion t… |
CVE-2026-57183 | Medium | 6.1 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/main/java/com/erudika/scoold/utils/ScooldUtils.java accepts… |
CVE-2026-55842 | Medium | 5.4 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguration() method in src/main/java/com/erudika/scoold/ScooldServer… |
CVE-2026-55840 | Medium | 5.4 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java… |
CVE-2021-46372 | Medium | 5.4 | 2022-02-18 | Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to a XSS attack when using uppercase lett… |
CVE-2024-50334 | Medium | 5.3 | 2024-10-29 | Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a sem… |