← Database

CVE-2025-27568

MEDIUM CVSS: 5.3 Published: 2025-04-15 Modified: 2026-06-17

Description

An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request.

Affected Platforms

Growatt Cloud Portal

Weakness Type

CWE-639

References