Description
An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options
High · 7.5
CVE-2025-70029
EUVD-2025-207396GHSA-m447-7fh7-88xc
An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certific…
Published Feb 11, 2026 · Updated Feb 12, 2026 · Assigned by mitre