CVE-2025-70027

7.5

High

Published:11 Mar 2026

Last updated:17 Jun 2026

Source:cve@mitre.org

Analyzed

Weakness (CWE)

CWE-918Server-Side Request Forgery (SSRF)

CVSS Vector

v3.1

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

View on MITRE Find PoC on GitHub

Description

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information

References

cve@mitre.org

https://gist.github.com/zcxlighthouse/6eac455e9094ae313a1c39c25d520b3d

cve@mitre.org

https://github.com/Sunbird-Ed

cve@mitre.org

https://github.com/Sunbird-Ed/SunbirdEd-portal