Beveiligingsadvies

CVE-2025-65899

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 00:00:00

Laatst bijgewerkt 2025-12-08 16:36:55

Toegewezen door mitre

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users (user_not_found) versus valid users with incorrect passwords (invalid_password). This observable response discrepancy allows unauthenticated attackers to enumerate valid usernames on the system.

← Alle CVE's bekijken Bekijk op cve.org ↗