CVE-2025-9239

Name of the Vulnerable Software and Affected Versions: elunez eladmin versions prior to 2.8

Description: A vulnerability exists in the EncryptUtils function within the DES Key Handler component of elunez eladmin. Manipulation of the STR PARAM argument with the input Passw0rd results in inadequate encryption strength. This issue can be exploited remotely and is considered to have high complexity, making exploitation difficult. The vulnerable function is located in the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java.

Recommendations: Update elunez eladmin to version 2.8 or later.