CVE-2025-70029

概要

参考情報

• gist.github.com/zcxlighthouse/e662c8316f98a1c72735cda4f6bfcfe6 · Third Party Advisory
• github.com/Sunbird-Ed · Product
• Sunbird-Ed/SunbirdEd-portal · Product

sunbirded-portal のその他の脆弱性

• CVE-2025-70027高 7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to …
• CVE-2025-70028高 7.5An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed S…
• CVE-2025-70031高 8.8An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70030高 7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
• CVE-2025-70032中 6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.