high7.5
CVE-2025-70029
An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information.
Impact
An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sunbird | Sunbirded-Portal | Version 1.13.4 |