Advisories · Technology
elunez eladmin.
Every CVE that names elunez eladmin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
eladmin through 2.7 Broken Access Control via /api/users Update and Delete
- elunez eladmin
- Broken access control
- CVSS 5.3 Medium
eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint
- elunez eladmin
- Broken access control
- CVSS 5.3 Medium
Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload
- elunez eladmin
- Broken access control
- CVSS 5.3 Medium
elunez eladmin GenConfigController improper authorization
- elunez eladmin
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
elunez eladmin Application Deployment App.java command injection
- elunez eladmin
- Other injection
- Command injection
- CVSS 5.3 Medium
elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization
- elunez eladmin
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
elunez eladmin Email Address updateEmail updateUserEmail improper authorization
- elunez eladmin
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
elunez eladmin LocalStorageController deleteFile improper authorization
- elunez eladmin
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
elunez eladmin exportUser csv injection
- elunez eladmin
- Other injection
- CVSS 5.3 Medium
elunez eladmin info information disclosure
- elunez eladmin
- Information disclosure
- Broken access control
- CVSS 6.3 Medium
elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption
- elunez eladmin
- Weak cryptography or TLS
- CWE-310
- CVSS 6.9 Medium
elunez eladmin Druid application-prod.yml default credentials
- elunez eladmin
- CWE-1392
- CVSS 5.3 Medium
elunez eladmin Maintenance Management Module testConnect deserialization
- elunez eladmin
- Insecure deserialization
- CWE-20
- CVSS 5.1 Medium
elunez eladmin upload checkFile deserialization
- elunez eladmin
- Insecure deserialization
- CWE-20
- CVSS 5.1 Medium
elunez eladmin Database Management/Deployment Management upload path traversal
- elunez eladmin
- CWE-27