LOW3.3

PYSEC-2025-219

Details

An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/tutor

Introduced in: 0

No fixed version published yet for tutor (pip). Pin to a known-safe version or switch to an alternative.

References

https://docs.tutor.edly.io[WEB]
https://github.com/Rivek619/CVE-2025-65681[ADVISORY]
https://github.com/overhangio/tutor[PACKAGE]
https://github.com/advisories/GHSA-gq25-78jf-v78c[ADVISORY]