CVE-2025-27225

TRUfusion Enterprise versions 7.10.4.0 and earlier are vulnerable to a security flaw where the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint is exposed to unauthenticated users. This vulnerability allows attackers to access the Internal Admin Contact Page without authorization, l...