Sunbirded-portal vulnerabilities

3 known vulnerabilities in Sunbirded-portal from Sunbird. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Sunbirded-portal: Server-Side Request Forgery

  CVE-2025-70027Mar 11, 2026Sunbird

  An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information

• 7.5 High severity

  Sunbirded-portal: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-70028Mar 9, 2026Sunbird

  An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

• 7.5 High severity

  Sunbirded-portal: Improper Certificate Validation

  CVE-2025-70029Feb 11, 2026Sunbird

  An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options