Lucene search
K

6 matches found

OSV
OSV
added 2025/09/05 6:15 p.m.3 views

CVE-2025-10014

A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote...

2.3CVSS6.5AI score
Exploits0References4
Cvelist
Cvelist
added 2025/09/05 5:32 p.m.32 views

CVE-2025-10014 elunez eladmin Email Address updateEmail updateUserEmail improper authorization

A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote...

3.1CVSS0.00256EPSS
Exploits0References4
CVE
CVE
added 2025/09/05 5:32 p.m.18 views

CVE-2025-10014

CVE-2025-10014 affects elunez eladmin up to 2.7, specifically the updateUserEmail function in the Email Address Handler at /api/users/updateEmail/. Manipulating the id/email argument can cause improper authorization, potentially allowing a remote attacker to access or modify user data. Exploitati...

3.1CVSS4AI score0.00256EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.3 views

PT-2025-36258

Name of the Vulnerable Software and Affected Versions: elunez eladmin versions up to 2.7 Description: A flaw exists in elunez eladmin that impacts the updateUserEmail function within the Email Address Handler component. Manipulation of the id/email argument in the /api/users/updateEmail/ API...

3.1CVSS3.7AI score0.00256EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/07/24 12:0 a.m.6 views

The vulnerability of the Email Address Handler component of the software platform based on Git for collaborative code development on GitLab allows a malicious individual to gain unauthorized access to limited functions.

The vulnerability of the Email Address Handler component in the Git-based software platform, which is used for collaborative code development on GitLab, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

4.3CVSS5.6AI score0.00469EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/24 12:0 a.m.4 views

PT-2024-5143 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 16.9.6 GitLab CE/EE versions 16.10 through 16.10.3 GitLab CE/EE versions 16.11 through 16.11.0 Description: The issue is related to insufficient access control in the Email Address Handler component of GitLab,...

5.3CVSS7.1AI score0.00469EPSS
Exploits0References14
Rows per page
Query Builder