Description
A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SMA | ennexos.sunnyportal.com | < 15.08.2025 | 15.08.2025 |
Medium · 6.5
CVE-2025-41685
EUVD-2025-27998GHSA-gv9g-f735-vc63
SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user
Published Aug 19, 2025 · Updated Aug 19, 2025 · Assigned by CERTVDE