CVE-2025-70027

概要

参考情報

• gist.github.com/zcxlighthouse/6eac455e9094ae313a1c39c25d520b3d · Third Party Advisory
• github.com/Sunbird-Ed · Product
• Sunbird-Ed/SunbirdEd-portal · Product

sunbirded-portal のその他の脆弱性

• CVE-2025-70028高 7.5An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed S…
• CVE-2025-70031高 8.8An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70030高 7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70032中 6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70033中 5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.…