154 matches found
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
PT-2025-4755 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions =2.7 Description: The issue concerns CSV injection in the exception log download module. This allows for potential data manipulation or extraction. No information is provided about the estimated number of affected devices or...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
ELADMIN 安全漏洞
ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which stems from a server-side request forgery in the HTTP Body ip parameter...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
CVE-2024-51243
The vulnerability CVE-2024-51243 affects eladmin v2.7 and earlier. Concretely, an RCE exists that can allow an attacker to control all application deployment servers through DeployController.java. The Red Hat and other adapters corroborate the same root cause. No exploitation details or fix/versi...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
CVE-2024-51242
Summary: CVE-2024-51242 affects ELADMIN (eladmin) 2.7 and earlier, with a Server-Side Request Forgery (SSRF) caused by manipulating the HTTP Body parameter named ip in ServerDeployController.java. The vulnerability enables potential unauthorized network access from the affected system, as reflect...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
ELADMIN 安全漏洞
ELADMIN is a backend management system for elunez personal developers. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which originates from a remote code execution attack that can control all application deployment servers of this management system via DeployController.java...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
PT-2024-34571 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: The issue allows for remote code execution RCE that can control all application deployment servers of the management system. This is achieved via the DeployController.java file. Recommendations: F...
PT-2024-34570 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. The manipulation of the HTTP Body ip parameter leads to SSRF. This occurs in the ServerDeployController.java file. Recommendations: Fo...
CVE-2024-44676
eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...