elunez eladmin info information disclosure_CVE-2025-9240

5.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Basic Information

ID CVE-2025-9240

Source VulDB

Published Aug 20, 2025 at 18:32

Modified Aug 20, 2025 at 18:54

Affected Product

Vendor elunez

Product eladmin

Version 2.0

Affected Versions elunez eladmin 2.0
elunez eladmin 2.1
elunez eladmin 2.2
elunez eladmin 2.3
elunez eladmin 2.4
elunez eladmin 2.5
elunez eladmin 2.6
elunez eladmin 2.7

CWE Classification

CWE-200 CWE-284

References

{
    "lastseen": "",
    "description": "A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.",
    "published": "2025-08-20T18:32:06.364Z",
    "modified": "2025-08-20T18:54:39.582Z",
    "type": "cve",
    "title": "elunez eladmin info information disclosure",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.320773\nhttps://vuldb.com/?ctiid.320773\nhttps://vuldb.com/?submit.631424\nhttps://github.com/elunez/eladmin/issues/885\nhttps://github.com/elunez/eladmin/issues/885#issue-3307153708",
    "id": "CVE-2025-9240",
    "bulletinFamily": "",
    "cwe": [
        "CWE-200",
        "CWE-284"
    ],
    "cvelist": null,
    "sourceData": "elunez eladmin 2.0\nelunez eladmin 2.1\nelunez eladmin 2.2\nelunez eladmin 2.3\nelunez eladmin 2.4\nelunez eladmin 2.5\nelunez eladmin 2.6\nelunez eladmin 2.7",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "eladmin",
    "version": "2.0",
    "vendor": "elunez",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}