Edly vulnerabilities
Published CVEs affecting Edly products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-65681
Low · 3.3
CWE-384 Nov 26, 2025
Session Fixation in Edly Tutor
An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.