PatchTheCVEsunbird vulnerabilities
Recent CVEs affecting sunbird products. 6 tracked.
sunbird has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-09. Highest priority: CVE-2025-70028 (score 41/100).
- CVE-2025-70033 MEDIUM 5.4 DOWNGRADE An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in S
- CVE-2025-70032 MEDIUM 6.1 DOWNGRADE An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-porta
- CVE-2025-70031 HIGH 8.8 DOWNGRADE An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13
- CVE-2025-70030 HIGH 7.5 DOWNGRADE An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed
- CVE-2025-70029 HIGH 7.5 DOWNGRADE An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information
- CVE-2025-70028 HIGH 7.5 DOWNGRADE An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
FAQ
How do I fix sunbird vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sunbird being exploited right now?
None of the tracked sunbird CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sunbird CVE should I patch first?
CVE-2025-70028 currently ranks highest (41/100): An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') .