Sunbird Sunbirded-portal — known CVE vulnerabilities

Every CVE whose affected-product data names Sunbird Sunbirded-portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-70031 — CVSS 8.8 (high): An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70028 — CVSS 7.5 (high): An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed…
• CVE-2025-70029 — CVSS 7.5 (high): An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL…
• CVE-2025-70027 — CVSS 7.5 (high): An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to…
• CVE-2025-70030 — CVSS 7.5 (high): An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70032 — CVSS 6.1 (medium): An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70033 — CVSS 5.4 (medium): An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal…