Eladmin

4 CVEs across 1 Eladmin products. Browse Eladmin vulnerabilities, severities, and proof-of-concept exploits.

Eladmin products with known CVEs

ProductCVEs
Eladmin15
Eladmin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-70997Medium6.52026-02-04A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level.
CVE-2025-10084Medium4.32025-09-08A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLog…
CVE-2025-10014Low3.12025-09-05A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address…
CVE-2025-9241Medium6.32025-08-20A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be ini…
CVE-2025-9240Medium4.32025-08-20A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation…
CVE-2025-9239Low3.72025-08-20A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/jav…
CVE-2025-8530Medium5.32025-08-04A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the f…
CVE-2025-3250Medium4.32025-04-04A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /a…
CVE-2025-2855Medium4.72025-03-27A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file…
CVE-2025-22978Critical9.82025-02-03eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.
CVE-2024-51243High7.22024-10-30The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment servers of this management system…
CVE-2024-51242Medium6.52024-10-30A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP…
CVE-2024-44677Critical9.82024-09-10eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java…
CVE-2024-44676Medium4.82024-09-10eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java.
CVE-2024-7458Medium5.52024-08-04A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /ap…