CVE-2025-41685

SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user

CVSS 6.5 MEDIUMEPSS 0.3%CWE-359

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Referencias