CVE-2020-36943CWE-770

aSc TimeTables 2021.6.2 - Denial of Service

Medium · published January 28, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

⚠️ An attacker can crash aSc TimeTables 2021.6.2 simply by pasting in an overly long subject title—like stuffing an entire pizza into a tiny lunchbox! 🍕📦 Think of aSc TimeTables as a filing cabinet. If you jam too many papers into one drawer, it can get stuck and refuse to open! In this case, overwriting subject fields with excessive data causes the application to crash, just like an overstuffed cabinet. The result? Users may face unexpected application crashes, leading to lost productivity and frustration. While it may not be catastrophic, it's certainly a nuisance that could disrupt daily operations, especially during peak planning times.

Put simply

Think of aSc TimeTables as a filing cabinet. If you jam too many papers into one drawer, it can get stuck and refuse to open! In this case, overwriting subject fields with excessive data causes the application to crash, just like an overstuffed cabinet. This vulnerability allows attackers to exploit the subject title fields in aSc TimeTables by inputting excessive data, triggering a denial of service as the application struggles to handle the overflow.

What to do

The result? Users may face unexpected application crashes, leading to lost productivity and frustration. While it may not be catastrophic, it's certainly a nuisance that could disrupt daily operations, especially during peak planning times. To protect against this vulnerability, users should update to the latest version of aSc TimeTables, ensuring that excessive input checks are enforced on subject fields. Regularly monitoring user inputs can also help mitigate potential attacks. You've got this! Stay proactive and secure your applications with these updates! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00286 · 20.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-28T17:35Z
EPSS history
Timeline
  • 28 JAN 17:35Z
    aSc TimeTables 2021.6.2 - Denial of Service
    cvelistv5