CVE-2025-3250: elunez eladmin Maintenance Management Module testConnect deserialization

Published Apr 4, 2025

Updated

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

elunez eladmin

eladmin eladmin=2.7

Event History

Apr 4, 2025

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 10, 57341

Event

via NVD·09:04 PM

Frequently Asked Questions

What is the severity of CVE-2025-3250?

CVE-2025-3250 is classified as a problematic vulnerability.

How do I fix CVE-2025-3250?

To fix CVE-2025-3250, you should apply the latest security patches provided by elunez for the eladmin software.

What component is affected by CVE-2025-3250?

CVE-2025-3250 affects the Maintenance Management Module functionality of the file /api/database/testConnect.

What type of vulnerability is CVE-2025-3250?

CVE-2025-3250 is a deserialization vulnerability that can lead to unauthorized manipulation.

Which software versions are impacted by CVE-2025-3250?

CVE-2025-3250 impacts the elunez eladmin version 2.7.