Critical PHP vulnerability - MyTimetable

Wednesday, 21 October 15:18 CEST

The MyTimetable visitor statistics application has been patched and is now online again.

Avatar for Marco Krikke
Marco Krikke

The PHP security team has given advance notice of an upcoming security release. We can confirm that core MyTimetable services are not affected by this PHP vulnerability, as MyTimetable is not using PHP. No patches or remedial actions are required for MyTimetable, and the service will continue to operate as normal.

As a precaution, we have taken MyTimetable visitor statistics offline, as this is using PHP. This is not considered a critical service and will stay offline until patched.

Avatar for Marco Krikke
Marco Krikke
Affected components
  • MyTimetable
  • External Calendar Integrations
    • Google Calendar synchronisation
    • Office 365 synchronisation
    • Exchange Web Services synchronisation
  • Teams/Zoom integration
  • Change notifications
  • DataSync
  • DataConnector