CVE Feed

    Dashboard / CVE / CVE-2025-70027

    CVE-2025-70027

    An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information

    Published:Mar 11, 2026
    Last Modified:Apr 2, 2026
    EPS:Mar 11, 2026
    EPSS Score:0.00039
    CVSS Score:7.5

    Affected Products

    Vendor
    Sunbird
    Product
    Sunbirded-portal
    Vendor
    Sunbird-ed
    Product
    Sunbirded-portal

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2025-70030 (CVSS 7.5) — An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed…
    CVE-2025-70031 (CVSS 8.8) — An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13…
    CVE-2025-70028 (CVSS 7.5) — An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') …
    CVE-2025-70033 (CVSS 5.4) — An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in S…
    CVE-2025-70032 (CVSS 6.1) — An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-porta…
    CVE-2025-70029 (CVSS 7.5) — An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The applicat…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High