← CVE Intelligence

CVE-2025-41685

SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user PUBLISHED

Description (CNA)

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.

Affected (CNA)

Vendor / productVersions
SMA / ennexos.sunnyportal.comaffected 0 before 15.08.2025

CWE

CWE-359

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.