CVE-2020-37109CWE-120

aSc TimeTables 2020.11.4 - Denial of Service

Medium · published February 6, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

⚠️ A single 1000-character string is all it takes to bring aSc TimeTables to its knees! 😱 Think of it like a crowded restaurant where one overly long order completely overwhelms the kitchen — it jams up the whole operation, leaving everyone waiting. Just like that, this vulnerability can crash the application by stuffing the Subject title field with too much data. If exploited, an attacker could cause the application to crash, leading to disruptions in scheduling and planning. This means lost productivity and potential chaos for users relying on this tool. While it’s not a total disaster, it can definitely create a frustrating experience!

Put simply

Think of it like a crowded restaurant where one overly long order completely overwhelms the kitchen — it jams up the whole operation, leaving everyone waiting. Just like that, this vulnerability can crash the application by stuffing the Subject title field with too much data. This denial of service vulnerability allows attackers to input a large buffer into the Subject title field, causing the application to crash due to insufficient handling of input size.

What to do

If exploited, an attacker could cause the application to crash, leading to disruptions in scheduling and planning. This means lost productivity and potential chaos for users relying on this tool. While it’s not a total disaster, it can definitely create a frustrating experience! To protect your workflow, update aSc TimeTables to version 2020.11.5 or later, where this issue has been fixed. Additionally, consider implementing input validation to prevent excessively long entries in your applications. 🛡️ You've got this! Addressing this vulnerability will keep your scheduling tools running smoothly. 👍💪

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00406 · 33.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-06T23:14Z
EPSS history
Timeline
  • 06 FEB 23:14Z
    aSc TimeTables 2020.11.4 - Denial of Service
    cvelistv5