CVE-2025-65681Low · CVSS 3.3EPSS 0.23%No fix publishedCVE-2025-65681An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.tutorPythonPublished November 26, 2025Updated November 28, 2025Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗