CVE-2025-65900

Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient permission validation and excessive data exposure in the backend, an authenticated user with basic read permissions can retrieve sensitive information for all...

PT-2022-15935 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase version 1.6.1 Description: The issue allows an authenticated user to gain unauthorized access to all user information and change the administrator password. Recommendations: For DataEase version 1.6.1, at the moment, there is no...