CVE-2025-10084: elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization
A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10084?
CVE-2025-10084 is classified as a high-severity vulnerability due to improper authorization risks.
How do I fix CVE-2025-10084?
To remediate CVE-2025-10084, update elunez eladmin to version 2.8 or later, which addresses the authorization flaw.
What component is affected by CVE-2025-10084?
CVE-2025-10084 affects the SysLogController component in elunez eladmin versions up to 2.7.
Can CVE-2025-10084 be exploited remotely?
Yes, CVE-2025-10084 can be exploited remotely, allowing unauthorized access to error log details.
What type of attack is associated with CVE-2025-10084?
CVE-2025-10084 is associated with attacks that manipulate authorization, potentially exposing sensitive log information.