关键漏洞信息 CVE ID: CVE-2025-65899 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Observable Response Discrepancy Privileges Required: None Impact Allows unauthenticated attackers to enumerate valid usernames. Enables targeted password spraying, credential-stuffing, and account discovery attacks. Description Authentication Endpoint: HTTP Method: POST Authentication Logic: JWT token creation process Vulnerability Root Cause The authentication system fails to implement consistent error responses. Different error messages reveal information about user existence: - Invalid Username: - Valid Username + Invalid Password: Exploitation Process 1. Invalid User Testing: Attempts authentication with non-existent usernames, receiving . 2. Valid User Testing: Attempts with valid usernames and incorrect passwords, receiving . 3. Backend Logic Analysis: Reveals flawed handling of user existence checks. Proof of Concept (PoC) Uses script for user enumeration. -