A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/elunez/eladmin/issues/886 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/elunez/eladmin/issues/886#issue-3307309824 | Exploit Issue Tracking Vendor Advisory |
| https://vuldb.com/?ctiid.320774 | Permissions Required VDB Entry |
| https://vuldb.com/?id.320774 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.631473 | Third Party Advisory VDB Entry |
Configurations
History
31 Oct 2025, 19:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:eladmin:eladmin:*:*:*:*:*:*:*:* | |
| References | () https://github.com/elunez/eladmin/issues/886 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/elunez/eladmin/issues/886#issue-3307309824 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://vuldb.com/?ctiid.320774 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.320774 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.631473 - Third Party Advisory, VDB Entry | |
| First Time |
Eladmin
Eladmin eladmin |
22 Aug 2025, 18:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
20 Aug 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-20 20:15
Updated : 2025-10-31 19:09
NVD link : CVE-2025-9241
Mitre link : CVE-2025-9241
CVE.ORG link : CVE-2025-9241
JSON object : View
Products Affected
eladmin
- eladmin