GHSA-gq25-78jf-v78c

Suggest an improvement
Source
https://github.com/advisories/GHSA-gq25-78jf-v78c
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-gq25-78jf-v78c/GHSA-gq25-78jf-v78c.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-gq25-78jf-v78c
Aliases
  • CVE-2025-65681
Published
2025-11-26T21:31:26Z
Modified
2025-12-01T23:41:12.677763Z
Severity
  • 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Overhang Tutor Discloses Sensitive Information due to Improper Cache-Control
Details

An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

Database specific 
{
    "nvd_published_at": "2025-11-26T19:15:49Z",
    "github_reviewed": true,
    "github_reviewed_at": "2025-12-01T22:57:57Z",
    "severity": "LOW",
    "cwe_ids": [
        "CWE-384"
    ]
}
References

Affected packages

PyPI / tutor

Package

Name
tutor
View open source insights on deps.dev
Purl
pkg:pypi/tutor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
20.0.2

Affected versions

0.*

0.1
0.2
0.2.1

12.*

12.0.1
12.0.2
12.0.3
12.0.4
12.1.0
12.1.1
12.1.2
12.1.3
12.1.4
12.1.5
12.1.6
12.1.7
12.2.0

13.*

13.0.0
13.0.1
13.0.2
13.0.3
13.1.0
13.1.1
13.1.2
13.1.3
13.1.4
13.1.5
13.1.6
13.1.7
13.1.8
13.1.9
13.1.10
13.1.11
13.2.0
13.2.1
13.2.2
13.2.3
13.3.0
13.3.1
13.3.2

14.*

14.0.0
14.0.1
14.0.2
14.0.3
14.0.4
14.0.5
14.1.0
14.1.1
14.1.2
14.2.0
14.2.1
14.2.2
14.2.3
14.2.4
14.2.5

15.*

15.0.0
15.1.0
15.2.0
15.3.0
15.3.1
15.3.2
15.3.3
15.3.4
15.3.5
15.3.6
15.3.7
15.3.8
15.3.9

16.*

16.0.0
16.0.1
16.0.2
16.0.3
16.0.5
16.1.0
16.1.1
16.1.2
16.1.3
16.1.4
16.1.5
16.1.6
16.1.7
16.1.8

17.*

17.0.0
17.0.1
17.0.2
17.0.3
17.0.4
17.0.5
17.0.6

18.*

18.0.0
18.1.0
18.1.1
18.1.2
18.1.3
18.1.4
18.2.0
18.2.1
18.2.2

19.*

19.0.0
19.0.1
19.0.2
19.0.3
19.0.4
19.0.5

20.*

20.0.0
20.0.1
20.0.2