GCVE - cpe:2.3:a:sunbird:sunbirded-portal:1.13.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sunbird:sunbirded-portal:1.13.4:*:*:*:*:*:*:*

part: a version: 1.13.4 update: *

Vendor	Sunbird (`16e14a78-f3b7-5865-8211-dede7f260465`)
Product	Sunbirded Portal (`0efab02d-ce0c-5ab8-a884-e026d89ed636`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/sunbird-ed/sunbirded-portal`	purl2cpe	2026-06-01 10:12:57.395396

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-70033`	vulnerable	2026-06-08 07:43:16.841036	Details available An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. Published: 2026-03-09T00:00:00.000Z Updated: 2026-03-09T18:59:20.565Z Open on db.gcve.eu Reference links https://github.com/Sunbird-Ed https://github.com/Sunbird-Ed/SunbirdEd-portal https://gist.github.com/zcxlighthouse/5036e0ea5a40146fb5051d7a94252857	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-70032`	vulnerable	2026-06-08 07:43:16.840673	Details available An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. Published: 2026-03-09T00:00:00.000Z Updated: 2026-03-11T14:31:46.638Z Open on db.gcve.eu Reference links https://github.com/Sunbird-Ed https://github.com/Sunbird-Ed/SunbirdEd-portal https://gist.github.com/zcxlighthouse/8a2124f8795db2755c2b2d0f2abcd3f5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-70031`	vulnerable	2026-06-08 07:43:16.840298	Details available An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. Published: 2026-03-09T00:00:00.000Z Updated: 2026-03-11T14:34:30.780Z Open on db.gcve.eu Reference links https://github.com/Sunbird-Ed https://github.com/Sunbird-Ed/SunbirdEd-portal https://gist.github.com/zcxlighthouse/470214b2f6fb0c82caecb9f369159006	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-70030`	vulnerable	2026-06-08 07:43:16.839892	Details available An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. Published: 2026-03-09T00:00:00.000Z Updated: 2026-06-02T15:58:53.198Z Open on db.gcve.eu Reference links https://github.com/Sunbird-Ed https://github.com/Sunbird-Ed/SunbirdEd-portal https://gist.github.com/zcxlighthouse/d80812b9d90683c0ac65db656ae3cfb0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-70029`	vulnerable	2026-06-08 07:43:16.839691	Details available An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options Published: 2026-02-11T00:00:00.000Z Updated: 2026-02-12T14:53:05.264Z Open on db.gcve.eu Reference links https://github.com/Sunbird-Ed https://github.com/Sunbird-Ed/SunbirdEd-portal https://gist.github.com/zcxlighthouse/e662c8316f98a1c72735cda4f6bfcfe6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-70028`	vulnerable	2026-06-08 07:43:16.839382	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-70027`	vulnerable	2026-06-08 07:43:16.838772	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.