CVE-2025-70028
Received Received - Intake
Path Traversal Vulnerability in SunbirdEd-portal v

Publication date: 2026-03-09

Last updated on: 2026-04-01

Assigner: MITRE

Description
An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-09
Last Modified
2026-04-01
Generated
2026-06-16
AI Q&A
2026-03-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-70028
EUVD
EUVD-2025-208454
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
sunbird sunbirded-portal 1.13.4
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-70028 affects SunbirdEd-portal version 1.13.4 and is classified as an Improper Limitation of a Pathname to a Restricted Directory vulnerability (CWE-22), commonly known as a Path Traversal flaw.

This vulnerability allows an attacker to manipulate file path inputs to traverse outside the intended directory boundaries.

As a result, the attacker can potentially access or modify sensitive files on the server that should be restricted, leading to unauthorized file access or alteration.

Impact Analysis

This vulnerability can impact you by allowing attackers to gain unauthorized access to sensitive files on the server.

Attackers may also modify these files, which can lead to data breaches, loss of data integrity, or further exploitation of the system.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-70028. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart