CVE-2025-2855: elunez eladmin upload checkFile deserialization
A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2855?
CVE-2025-2855 is classified as problematic due to its remote exploitability and deserialization vulnerabilities.
How do I fix CVE-2025-2855?
To fix CVE-2025-2855, update the elunez eladmin software to version 2.8 or later.
What is the nature of the vulnerability in CVE-2025-2855?
CVE-2025-2855 involves deserialization issues caused by improper handling of the 'servers' argument in the checkFile function.
Are there any workarounds for mitigating CVE-2025-2855?
As a workaround for CVE-2025-2855, limit access to the /api/deploy/upload endpoint until an update is applied.
Which versions of elunez eladmin are affected by CVE-2025-2855?
CVE-2025-2855 affects all versions of elunez eladmin up to and including 2.7.