CVE-2025-2855

Name of the Vulnerable Software and Affected Versions elunez eladmin versions up to 2.7

Description A problematic issue has been found, affecting the function checkFile of the file "/api/deploy/upload". The manipulation of the argument servers leads to deserialization. This issue can be exploited remotely.

Recommendations For elunez eladmin versions up to 2.7, as a temporary workaround, consider disabling the checkFile function until a patch is available. Restrict access to the "/api/deploy/upload" endpoint to minimize the risk of exploitation. Avoid using the servers argument in the affected API endpoint until the issue is resolved.