https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70028.htmlhttps://patchthecve.com/cve/CVE-2025-70028.htmlWed, 17 Jun 2026 10:03:01 +0000HIGH 7.5: An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.https://patchthecve.com/cve/CVE-2025-70031.htmlhttps://patchthecve.com/cve/CVE-2025-70031.htmlWed, 17 Jun 2026 10:03:02 +0000HIGH 8.8: An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.https://patchthecve.com/cve/CVE-2025-70030.htmlhttps://patchthecve.com/cve/CVE-2025-70030.htmlWed, 17 Jun 2026 10:03:02 +0000HIGH 7.5: An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.https://patchthecve.com/cve/CVE-2025-70032.htmlhttps://patchthecve.com/cve/CVE-2025-70032.htmlWed, 17 Jun 2026 10:03:02 +0000MEDIUM 6.1: An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.https://patchthecve.com/cve/CVE-2025-70033.htmlhttps://patchthecve.com/cve/CVE-2025-70033.htmlWed, 17 Jun 2026 10:03:02 +0000MEDIUM 5.4: An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.https://patchthecve.com/cve/CVE-2025-70029.htmlhttps://patchthecve.com/cve/CVE-2025-70029.htmlWed, 17 Jun 2026 10:03:02 +0000HIGH 7.5: An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options