CVE-2025-70031

Received Received - Intake

Cross-Site Request Forgery in SunbirdEd-portal v

Publication date: 2026-03-09

Last updated on: 2026-04-01

Assigner: MITRE

Description

An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-09

Last Modified

2026-04-01

Generated

2026-07-06

AI Q&A

2026-03-09

EPSS Evaluated

2026-07-05

NVD

CVE-2025-70031

EUVD

EUVD-2025-208448

Affected Vendors & Products

Vendor	Product	Version / Range
sunbird	sunbirded-portal	1.13.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Detection Guidance

This vulnerability is a Cross-Site Request Forgery (CSRF) issue in SunbirdEd-portal version 1.13.4, which allows attackers to trick authenticated users into performing unintended actions.

Detection typically involves monitoring for unusual or unauthorized state-changing requests originating from authenticated users without proper CSRF tokens.

Since no specific detection commands or tools are provided, general approaches include inspecting HTTP requests for missing or invalid CSRF tokens and reviewing server logs for suspicious activity.

Mitigation Strategies

To mitigate this CSRF vulnerability in SunbirdEd-portal v1.13.4, it is recommended to implement CSRF protection mechanisms such as validating CSRF tokens on state-changing requests.

Additionally, updating to a patched or newer version of the software that addresses this issue is advised if available.

In the absence of a patch, restricting access to the application to trusted users and enforcing strict session management can help reduce risk.

Executive Summary

CVE-2025-70031 is a Cross-Site Request Forgery (CSRF) vulnerability identified in SunbirdEd-portal version 1.13.4.

This security flaw allows attackers to deceive authenticated users into executing unintended actions without their consent.

Impact Analysis

Exploiting this vulnerability could enable unauthorized modifications to user data or account settings within the affected application.

Compliance Impact

I don't know

Hi! I’m here to help you understand CVE-2025-70031. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70