PT-2025-34145 · Elunez · Eladmin
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
elunez eladmin versions prior to 2.8
Description:
A security flaw has been discovered in elunez eladmin up to version 2.7. This issue affects an unknown functionality of the file
/auth/info. Manipulation of this functionality results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.Recommendations:
Update to version 2.8 or later to address this issue.
Exploit
Fix
Improper Access Control
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Eladmin