Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-8530 EUVD-2025-23562GHSA-xm33-6wj2-8hph

elunez eladmin Druid application-prod.yml default credentials

Published Aug 4, 2025 · Updated Aug 5, 2025 · Assigned by VulDB

Description

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipulation of the argument login-username/login-password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
elunez eladmin 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7 —

References