Difuse Kalmia
2 CVEs affecting Difuse Kalmia. Latest disclosed: 2025-12-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-65900 | Medium | 6.5 | 2025-12-04 | Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient permission validation… |
CVE-2025-65899 | Medium | 5.3 | 2025-12-04 | Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invali… |