PT-2025-34145 · Elunez · Eladmin

·

CVE-2025-9240

·

Publicado

2025-08-20

·

Atualizado

2025-08-21

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: elunez eladmin versions prior to 2.8
Description: A security flaw has been discovered in elunez eladmin up to version 2.7. This issue affects an unknown functionality of the file /auth/info. Manipulation of this functionality results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
Recommendations: Update to version 2.8 or later to address this issue.

Exploit

Correção

Improper Access Control

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-9240

Produtos afetados

Eladmin