What’s Vulnerable › Vulnerabilities

CVE-2025-69581

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-16 · updated 2026-06-17
• Weakness: CWE-524

Description

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to view confidential information. This leads to profiling, impersonation, targeted attacks, and significant privacy risks.

Affected products

• chamilo-lms: 1.11.2

References

• https://github.com/Rivek619/CVE-2025-69581
• https://github.com/chamilo/chamilo-lms

Get alerted when CVE-2025-69581 or the next vulnerability affects your stack