tutor@17.0.3 vulnerabilities

The Docker-based Open edX distribution designed for peace of mind

  • latest version

    20.0.2

  • first published

    13 years ago

  • latest version published

    1 months ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the tutor package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Use of Cache Containing Sensitive Information

    tutor is a The Docker-based Open edX distribution designed for peace of mind

    Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to the absence of proper cache-control HTTP headers and insufficient client-side session validation. An attacker can access sensitive information by exploiting improper session management and bypassing client-side controls.

    How to fix Use of Cache Containing Sensitive Information?

    There is no fixed version for tutor.

    [0,)