Skip to content
OpenAdvisories

Vendor

elunez

15 known vulnerabilities.

Products

eladmin 15
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.8
    CVE-2026-111604

    eladmin through 2.7 Broken Access Control via /api/users Update and Delete

    eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to modify or delete accounts outside their data scope because write handlers skip department checks. Attackers with user:edit or user:del permission…

    elunez eladmin
  • Low 3.1
    CVE-2025-10014

    elunez eladmin Email Address updateEmail updateUserEmail improper authorization

    A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The at…

    elunez eladmin
  • Low 3.7
    CVE-2025-9239

    elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption

    A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argu…

    elunez eladmin