CVE Feed

    Dashboard / CVE / CVE-2025-70029

    CVE-2025-70029

    An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options

    Published:Feb 11, 2026
    Last Modified:Apr 1, 2026
    EPS:Feb 11, 2026
    EPSS Score:0.0001
    CVSS Score:7.5

    Affected Products

    Vendor
    Sunbird
    Product
    Sunbirded-portal
    Vendor
    Sunbird-ed
    Product
    Sunbirded-portal

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2025-70027 (CVSS 7.5) — An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.1…
    CVE-2025-70030 (CVSS 7.5) — An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed…
    CVE-2025-70031 (CVSS 8.8) — An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13…
    CVE-2025-70028 (CVSS 7.5) — An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') …
    CVE-2025-70033 (CVSS 5.4) — An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in S…
    CVE-2025-70032 (CVSS 6.1) — An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-porta…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High