CVE-2025-65681: Edly Tutor

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

Affected products

• Edly Tutor: version 20.0.2 only

Published 2025-11-26. Last modified 2026-06-17.