汇总 sunbird 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
已披露问题常与 CSRF、SSRF与开放重定向 相关，可能在 软件部署与生产负载 场景中带来 文件覆盖与会话劫持 等暴露风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2025-70027 | An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information | [email protected] | 7.5 | 0.27% | 2026-03-11 | 2026-06-17 |
| CVE-2025-70028 | An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. | [email protected] | 7.5 | 0.41% | 2026-03-09 | 2026-06-17 |
| CVE-2025-70031 | An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. | [email protected] | 8.8 | 0.15% | 2026-03-09 | 2026-06-17 |
| CVE-2025-70030 | An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. | [email protected] | 7.5 | 0.34% | 2026-03-09 | 2026-06-17 |
| CVE-2025-70032 | An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. | [email protected] | 6.1 | 0.24% | 2026-03-09 | 2026-06-17 |
| CVE-2025-70033 | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. | [email protected] | 5.4 | 0.24% | 2026-03-09 | 2026-06-17 |
| CVE-2025-70029 | An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options | [email protected] | 7.5 | 0.28% | 2026-02-11 | 2026-06-17 |