What is CVE-2025-69581?

CVE-2025-69581 is a medium-severity vulnerability in Chamilo Lms, classified under Use of Cache Containing Sensitive Information. CVSS score: 5.5/10. Published 2026-01-16.

How severe is CVE-2025-69581?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2025-69581 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Chamilo Lms

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to view confidential information. This leads to profiling, impersonation, targeted attacks, and significant privacy risks.

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Chamilo Chamilo_lms — versions 1.11.2
N/a — versions n/a

Weakness classification (CWE)

CWE-524 — Use of Cache Containing Sensitive Information

Public proof-of-concept exploits

Rivek619/CVE-2025-69581

References

cve@mitre.org (Product)
cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-69581?: CVE-2025-69581 is a medium-severity vulnerability in Chamilo Lms, classified under Use of Cache Containing Sensitive Information. CVSS score: 5.5/10. Published 2026-01-16.
How severe is CVE-2025-69581?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2025-69581 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.