CVE-2025-65681

CVE-2025-65681 Se descubrió un problema en Overhang.IO tutor-open-edx overhangio/tutor 20.0.2 que permite a atacantes locales no autorizados obtener acceso a información sensible debido a la ausencia de cabeceras HTTP de control de caché adecuadas y verificaciones de sesión del lado del cliente...

PT-2025-48178

Name of the Vulnerable Software and Affected Versions Overhang.IO tutor-open-edx version 20.0.2 Description A security issue exists in Overhang.IO tutor-open-edx version 20.0.2 that could allow local unauthorized attackers to access sensitive information. This is due to missing cache-control HTTP...

CVE-2025-65681: Session Fixation

An issue was discovered in Overhang.IO tutor-open-edx overhangio/tutor 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks...