20.0.2
13 years ago
1 months ago
Known vulnerabilities in the tutor package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
tutor is a The Docker-based Open edX distribution designed for peace of mind Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to the absence of proper cache-control HTTP headers and insufficient client-side session validation. An attacker can access sensitive information by exploiting improper session management and bypassing client-side controls. How to fix Use of Cache Containing Sensitive Information? There is no fixed version for | [0,) |