medium5.3
CVE-2025-31933
An unauthenticated attacker can check the existence of usernames in the system by querying an API.
Impact
An unauthenticated attacker can check the existence of usernames in the system by querying an API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |