Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

elunez — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting elunez. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Elunez primarily develops web-based collaboration and project management software, serving as a core tool for team coordination and document sharing. Historically, vulnerabilities in this product have commonly included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access control issues. The software has been associated with multiple security incidents, including a 2022 vulnerability affecting over 50,000 instances that allowed unauthorized access to sensitive project data. Despite patches, persistent weaknesses in authentication mechanisms continue to pose risks to enterprise deployments.

Top products by elunez: eladmin
CVE ID Title CVSS Severity Published
CVE-2026-108706 eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint — eladmin CWE-862 4.3 Medium 2026-10-11
CVE-2026-108688 Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload — eladmin CWE-862 4.3 Medium 2026-10-11
CVE-2026-77036 elunez eladmin GenConfigController improper authorization — eladmin CWE-285 6.3 Medium 2026-08-20
CVE-2026-10550 elunez eladmin Application Deployment App.java command injection — eladmin CWE-77 6.3 Medium 2026-06-02
CVE-2025-10084 elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization — eladmin CWE-285 4.3 Medium 2025-09-08
CVE-2025-10014 elunez eladmin Email Address updateEmail updateUserEmail improper authorization — eladmin CWE-285 3.1 Low 2025-09-05
CVE-2025-9937 elunez eladmin LocalStorageController deleteFile improper authorization — eladmin CWE-285 5.4 Medium 2025-09-03
CVE-2025-9241 elunez eladmin exportUser csv injection — eladmin CWE-1236 6.3 Medium 2025-08-20
CVE-2025-9240 elunez eladmin info information disclosure — eladmin CWE-200 4.3 Medium 2025-08-20
CVE-2025-9239 elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption — eladmin CWE-326 3.7 Low 2025-08-20
CVE-2025-8530 elunez eladmin Druid application-prod.yml default credentials — eladmin CWE-1392 5.3 Medium 2025-08-04
CVE-2025-3250 elunez eladmin Maintenance Management Module testConnect deserialization — eladmin CWE-502 4.3 Medium 2025-04-04
CVE-2025-2855 elunez eladmin upload checkFile deserialization — eladmin CWE-502 4.7 Medium 2025-03-27
CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal — eladmin CWE-27 5.5 Medium 2024-08-04

This page lists every published CVE security advisory associated with elunez. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.