A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/elunez/eladmin/issues/885 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/elunez/eladmin/issues/885#issue-3307153708 | Exploit Issue Tracking Vendor Advisory |
| https://vuldb.com/?ctiid.320773 | Permissions Required VDB Entry |
| https://vuldb.com/?id.320773 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.631424 | Third Party Advisory VDB Entry |
Configurations
History
31 Oct 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/elunez/eladmin/issues/885 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/elunez/eladmin/issues/885#issue-3307153708 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://vuldb.com/?ctiid.320773 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.320773 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.631424 - Third Party Advisory, VDB Entry | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Eladmin
Eladmin eladmin |
|
| CPE | cpe:2.3:a:eladmin:eladmin:*:*:*:*:*:*:*:* |
22 Aug 2025, 18:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
20 Aug 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-20 19:15
Updated : 2025-10-31 19:16
NVD link : CVE-2025-9240
Mitre link : CVE-2025-9240
CVE.ORG link : CVE-2025-9240
JSON object : View
Products Affected
eladmin
- eladmin
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-284Improper Access Control
NVD-CWE-noinfo