~ / search / GHSA-gq25-78jf-v78c

GHSA-gq25-78jf-v78c

Overhang Tutor Discloses Sensitive Information due to Improper Cache-Control

Source: GitHub Advisory Database (reviewed) Low CVE-2025-65681

Packages

EcosystemPackageAffectedFixed in
PyPI tutor <= 20.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

References

External links from the advisory. They lead to third-party sites.