medium4.3
CVE-2025-10084
A vulnerability was identified in elunez eladmin up to 2.7.
Impact
A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eladmin | Eladmin | through 2.7 |