Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

eladmin — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in eladmin, with AI-generated Chinese analysis, references, and POCs.

Vendor: elunez

CVE ID Title CVSS Severity Published
CVE-2026-77036 elunez eladmin GenConfigController improper authorization CWE-285 6.3 Medium 2026-08-20
CVE-2026-10550 elunez eladmin Application Deployment App.java command injection CWE-77 6.3 Medium 2026-06-02
CVE-2026-8127 eladmin Users API Endpoint UserController.java checkLevel access control CWE-284 6.3 Medium 2026-05-08
CVE-2025-10084 elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization CWE-285 4.3 Medium 2025-09-08
CVE-2025-10014 elunez eladmin Email Address updateEmail updateUserEmail improper authorization CWE-285 3.1 Low 2025-09-05
CVE-2025-9937 elunez eladmin LocalStorageController deleteFile improper authorization CWE-285 5.4 Medium 2025-09-03
CVE-2025-9241 elunez eladmin exportUser csv injection CWE-1236 6.3 Medium 2025-08-20
CVE-2025-9240 elunez eladmin info information disclosure CWE-200 4.3 Medium 2025-08-20
CVE-2025-9239 elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption CWE-326 3.7 Low 2025-08-20
CVE-2025-8530 elunez eladmin Druid application-prod.yml default credentials CWE-1392 5.3 Medium 2025-08-04
CVE-2025-3250 elunez eladmin Maintenance Management Module testConnect deserialization CWE-502 4.3 Medium 2025-04-04
CVE-2025-2855 elunez eladmin upload checkFile deserialization CWE-502 4.7 Medium 2025-03-27
CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal CWE-27 5.5 Medium 2024-08-04

All 13 known CVE vulnerabilities affecting eladmin with full Chinese analysis, references, and POCs where available.