Vulnerabilities

TI-2025-42988 CVE-2025-70027 · GHSA-vvv2-p9hv-8634

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed…

LOW 39

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00316 Published 2026-03-11 No fix listed CWE-918

TI-2025-42994 CVE-2025-70033 · GHSA-p4cw-m447-v4j4

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page…

LOW 24

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00271 Published 2026-03-09 No fix listed CWE-79

TI-2025-42993 CVE-2025-70032 · GHSA-93xp-qhpp-8v37

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

LOW 27

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00279 Published 2026-03-09 No fix listed CWE-601

TI-2025-42992 CVE-2025-70031 · GHSA-9wjc-9c3g-wq2v

An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

LOW 39

An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00181 Published 2026-03-09 No fix listed CWE-352

TI-2025-42991 CVE-2025-70030 · GHSA-9qhc-gmhr-257v

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was…

LOW 39

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-03-09 No fix listed CWE-1333

TI-2025-42989 CVE-2025-70028 · GHSA-xhch-j6v3-w4f3

An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted…

LOW 39

An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00477 Published 2026-03-09 No fix listed CWE-22

TI-2025-42990 CVE-2025-70029 · GHSA-m447-7fh7-88xc

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive…

LOW 39

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00294 Published 2026-02-11 No fix listed CWE-295

Vulnerabilities

Filters

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed…

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page…

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was…

An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted…

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive…