CVE-2025-70031
Received Received - Intake
Cross-Site Request Forgery in SunbirdEd-portal v

Publication date: 2026-03-09

Last updated on: 2026-04-01

Assigner: MITRE

Description
An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-09
Last Modified
2026-04-01
Generated
2026-06-16
AI Q&A
2026-03-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-70031
EUVD
EUVD-2025-208448
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
sunbird sunbirded-portal 1.13.4
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-70031 is a Cross-Site Request Forgery (CSRF) vulnerability identified in SunbirdEd-portal version 1.13.4.

This security flaw allows attackers to deceive authenticated users into executing unintended actions without their consent.

Impact Analysis

Exploiting this vulnerability could enable unauthorized modifications to user data or account settings within the affected application.

Compliance Impact

I don't know

Detection Guidance

This vulnerability is a Cross-Site Request Forgery (CSRF) issue in SunbirdEd-portal version 1.13.4, which allows attackers to trick authenticated users into performing unintended actions.

Detection typically involves monitoring for unusual or unauthorized state-changing requests originating from authenticated users without proper CSRF tokens.

Since no specific detection commands or tools are provided, general approaches include inspecting HTTP requests for missing or invalid CSRF tokens and reviewing server logs for suspicious activity.

Mitigation Strategies

To mitigate this CSRF vulnerability in SunbirdEd-portal v1.13.4, it is recommended to implement CSRF protection mechanisms such as validating CSRF tokens on state-changing requests.

Additionally, updating to a patched or newer version of the software that addresses this issue is advised if available.

In the absence of a patch, restricting access to the application to trusted users and enforcing strict session management can help reduce risk.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-70031. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart