PatchTheCVEsunbirded-portal vulnerabilities and fixes
Recent CVEs affecting sunbirded-portal, with upgrade or downgrade steps. 6 tracked.
Also searched as: sunbirded portal.
sunbirded-portal has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-09. Highest priority: CVE-2025-70028 (score 41/100).
- CVE-2025-70033 MEDIUM 5.4 DOWNGRADE An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in S
- CVE-2025-70032 MEDIUM 6.1 DOWNGRADE An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-porta
- CVE-2025-70031 HIGH 8.8 DOWNGRADE An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13
- CVE-2025-70030 HIGH 7.5 DOWNGRADE An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed
- CVE-2025-70029 HIGH 7.5 DOWNGRADE An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information
- CVE-2025-70028 HIGH 7.5 DOWNGRADE An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
FAQ
How do I fix sunbirded-portal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sunbirded-portal being exploited right now?
None of the tracked sunbirded-portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sunbirded-portal CVE should I patch first?
CVE-2025-70028 currently ranks highest (41/100): An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') .