CVE-2025-9240 - elunez eladmin info information disclosure

Back Back to CVE browser

MEDIUM

elunez eladmin info information disclosure

Published Aug 20, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.33%

Description

A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Affected products

Vendor Elunez Product Eladmin Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -
- Version
  2.1
  Status
  affected
  Constraints
  -
- Version
  2.2
  Status
  affected
  Constraints
  -
- Version
  2.3
  Status
  affected
  Constraints
  -
- Version
  2.4
  Status
  affected
  Constraints
  -
- Version
  2.5
  Status
  affected
  Constraints
  -
- Version
  2.6
  Status
  affected
  Constraints
  -
- Version
  2.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Elunez

Eladmin

n/a

Version	Status	Constraints
2.0	affected	-
2.1	affected	-
2.2	affected	-
2.3	affected	-
2.4	affected	-
2.5	affected	-
2.6	affected	-
2.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-284

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25382
Advisory
https://github.com/elunez/eladmin/issues/885
issue-trackingExploitIssue TrackingVendor Advisory
https://github.com/elunez/eladmin/issues/885#issue-3307153708
exploitissue-trackingIssue TrackingVendor Advisory
https://vuldb.com/?ctiid.320773
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.320773
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.631424
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25382		Advisory
https://github.com/elunez/eladmin/issues/885		issue-trackingExploitIssue TrackingVendor Advisory
https://github.com/elunez/eladmin/issues/885#issue-3307153708		exploitissue-trackingIssue TrackingVendor Advisory
https://vuldb.com/?ctiid.320773		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.320773		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.631424		third-party-advisoryThird Party AdvisoryVDB Entry