Sunbird-Ed Portal Redirects to Untrusted Sites

Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

6.1

Sunbird-Ed Portal Redirects to Untrusted Sites

CVE-2025-70032

Summary

The Sunbird-Ed Portal version 1.13.4 may redirect users to unknown or untrusted websites, making it possible for attackers to steal user data or spread malware. This issue affects the security of the portal, putting user information at risk. Users should update to the latest version to fix this issue.

Original title

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

Original description

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

Vulnerability type

CWE-601 Open Redirect

https://gist.github.com/zcxlighthouse/8a2124f8795db2755c2b2d0f2abcd3f5
https://github.com/Sunbird-Ed
https://github.com/Sunbird-Ed/SunbirdEd-portal

Published: 9 Mar 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026