CVE-2025-70027: Sunbird Sunbirded-Portal

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information

Affected products

• Sunbird Sunbirded-Portal: version 1.13.4 only

Published 2026-03-11. Last modified 2026-06-17.