Sunbird vulnerabilities
We track 4 vulnerabilities in Sunbird products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2026.
Latest Sunbird vulnerabilities
- 7.5 High severity
Sunbirded-portal: Server-Side Request Forgery
An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information
- 7.5 High severity
Sunbirded-portal: Improper Limitation of a Pathname to a Restricted Directory
An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
- 7.5 High severity
Sunbirded-portal: Improper Certificate Validation
An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options
- 7.2 High severity
DCIM dcTrack: Authentication Bypass Using an Alternate Path or Channel
DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the ho