CVE Feed

    Dashboard / CVE / CVE-2025-70028

    CVE-2025-70028

    An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

    Published:Mar 9, 2026
    Last Modified:Apr 1, 2026
    EPS:Mar 9, 2026
    EPSS Score:0.0006
    CVSS Score:7.5

    Affected Products

    Vendor
    Sunbird
    Product
    Sunbirded-portal
    Vendor
    Sunbird-ed
    Product
    Sunbirded-portal

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-70027 (CVSS 7.5) — An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.1…
    CVE-2025-70030 (CVSS 7.5) — An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed…
    CVE-2025-70031 (CVSS 8.8) — An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13…
    CVE-2025-70033 (CVSS 5.4) — An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in S…
    CVE-2025-70032 (CVSS 6.1) — An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-porta…
    CVE-2025-70029 (CVSS 7.5) — An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The applicat…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High