medium5.3
CVE-2025-24487
An unauthenticated attacker can infer the existence of usernames in the system by querying an API.
Impact
An unauthenticated attacker can infer the existence of usernames in the system by querying an API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |