Created
February 11, 2026 02:23
-
-
Save zcxlighthouse/e662c8316f98a1c72735cda4f6bfcfe6 to your computer and use it in GitHub Desktop.
CVE-2025-70029
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [CVE ID] | |
| CVE-2025-70029 | |
| [PRODUCT] | |
| SunbirdEd-portal | |
| [VERSION] | |
| v1.13.4 | |
| [PROBLEM TYPE] | |
| Improper Certificate Validation (CWE-295) | |
| [DESCRIPTION] | |
| The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTP request options, which allows man-in-the-middle attackers to spoof servers and intercept sensitive data. This weakness is classified as CWE-295: Improper Certificate Validation. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment