TI-2025-43187 CVE-2025-70997 · GHSA-pc84-8mjq-pcg8
A vulnerability has been discovered in eladmin v2.7 and before.
Priority HIGH 70
A vulnerability has been discovered in eladmin v2.7 and before.
Vulnerabilities
15 records
TI-2025-09257 CVE-2025-10084 · GHSA-mm3p-cjh3-hc74
elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization
Priority MEDIUM 57
A vulnerability was identified in elunez eladmin up to 2.7.
TI-2025-09192 CVE-2025-10014 · GHSA-837q-78w5-p6p8
elunez eladmin Email Address updateEmail updateUserEmail improper authorization
Priority MEDIUM 45
A flaw has been found in elunez eladmin up to 2.7.
TI-2025-08473 CVE-2025-9241 · GHSA-3v6h-4jjq-8c6c
elunez eladmin exportUser csv injection
Priority MEDIUM 57
A weakness has been identified in elunez eladmin up to 2.7.
TI-2025-08472 CVE-2025-9240 · GHSA-4gj3-28pw-jmff
elunez eladmin info information disclosure
Priority LOW 24
A security flaw has been discovered in elunez eladmin up to 2.7.
TI-2025-08471 CVE-2025-9239 · GHSA-h7vx-m3wc-6xq4
elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption
Priority LOW 27
A vulnerability was identified in elunez eladmin up to 2.7.
TI-2025-07810 CVE-2025-8530 · GHSA-xm33-6wj2-8hph
elunez eladmin Druid application-prod.yml default credentials
Priority HIGH 70
A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7.
TI-2025-02847 CVE-2025-3250 · GHSA-fc2p-qppw-qq2v
elunez eladmin Maintenance Management Module testConnect deserialization
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7.
TI-2025-02493 CVE-2025-2855 · GHSA-wq76-hwvv-4gwx
elunez eladmin upload checkFile deserialization
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7.
TI-2025-16810 CVE-2025-22978 · GHSA-gf66-v569-23vx
eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.
Priority HIGH 82
eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.
TI-2024-34293 CVE-2024-51243 · GHSA-f7rc-79mv-v26v
The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can…
Priority HIGH 67
The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment servers of this management system via DeployController.java.
TI-2024-34292 CVE-2024-51242 · GHSA-84c3-765r-7fjp
A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and…
Priority MEDIUM 64
A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java.
TI-2024-29957 CVE-2024-44677 · GHSA-38rg-8rfh-j366
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows…
Priority MEDIUM 49
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.
TI-2024-29956 CVE-2024-44676 · GHSA-8vw5-3vcf-59wh
eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an…
Priority MEDIUM 60
eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController.
TI-2024-06912 CVE-2024-7458 · GHSA-cccm-3vq5-cxqg
elunez eladmin Database Management/Deployment Management upload path traversal
Priority MEDIUM 56
A vulnerability was found in elunez eladmin up to 2.7 and classified as critical.