CVE-2025-9240: elunez eladmin info information disclosure
A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9240?
CVE-2025-9240 is classified as a medium severity vulnerability due to its potential for remote information disclosure.
How do I fix CVE-2025-9240?
To fix CVE-2025-9240, update elunez eladmin to the latest version beyond 2.7 as it contains patches for this vulnerability.
What type of vulnerability is CVE-2025-9240?
CVE-2025-9240 is an information disclosure vulnerability affecting the authentication functionality of elunez eladmin.
Can CVE-2025-9240 be exploited remotely?
Yes, CVE-2025-9240 can be exploited remotely, allowing attackers to access sensitive information.
Which versions of elunez eladmin are affected by CVE-2025-9240?
CVE-2025-9240 affects elunez eladmin versions up to and including 2.7.