CVE-2025-9241 - elunez eladmin exportUser csv injection

Back Back to CVE browser

MEDIUM

elunez eladmin exportUser csv injection

Published Aug 20, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.32%

Description

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected products

Vendor Elunez Product Eladmin Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -
- Version
  2.1
  Status
  affected
  Constraints
  -
- Version
  2.2
  Status
  affected
  Constraints
  -
- Version
  2.3
  Status
  affected
  Constraints
  -
- Version
  2.4
  Status
  affected
  Constraints
  -
- Version
  2.5
  Status
  affected
  Constraints
  -
- Version
  2.6
  Status
  affected
  Constraints
  -
- Version
  2.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Elunez

Eladmin

n/a

Version	Status	Constraints
2.0	affected	-
2.1	affected	-
2.2	affected	-
2.3	affected	-
2.4	affected	-
2.5	affected	-
2.6	affected	-
2.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1236

CWE-74

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25399
Advisory
https://github.com/elunez/eladmin/issues/886
issue-trackingExploitIssue TrackingVendor Advisory
https://github.com/elunez/eladmin/issues/886#issue-3307309824
exploitissue-trackingIssue TrackingVendor Advisory
https://vuldb.com/?ctiid.320774
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.320774
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.631473
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25399		Advisory
https://github.com/elunez/eladmin/issues/886		issue-trackingExploitIssue TrackingVendor Advisory
https://github.com/elunez/eladmin/issues/886#issue-3307309824		exploitissue-trackingIssue TrackingVendor Advisory
https://vuldb.com/?ctiid.320774		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.320774		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.631473		third-party-advisoryThird Party AdvisoryVDB Entry