Beveiligingsadvies

CVE-2025-70029

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-11 00:00:00
Laatst bijgewerkt 2026-02-12 14:53:05
Toegewezen door mitre
CVSS-score 7.5
Status PUBLISHED

Beschrijving

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options