Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2025-65900

Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient permission validation and excessive data exposure in the backend, an authenticated user with basic read permissions can retrieve sensitive information for all platform users.

  • Published: Dec 4, 2025
  • Updated: Dec 11, 2025
  • CVE: CVE-2025-65900
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
difuse / kalmia 0.2.0 0.2.0.x