tutor@20.0.3 vulnerabilities

The Docker-based Open edX distribution designed for peace of mind

Direct Vulnerabilities

Known vulnerabilities in the tutor package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Use of Cache Containing Sensitive Information

tutor is a The Docker-based Open edX distribution designed for peace of mind

Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to the absence of proper cache-control HTTP headers and insufficient client-side session validation. An attacker can access sensitive information by exploiting improper session management and bypassing client-side controls.

How to fix Use of Cache Containing Sensitive Information?

There is no fixed version for tutor.

[0,)