CVE-2025-9937: elunez eladmin LocalStorageController deleteFile improper authorization
A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9937?
CVE-2025-9937 is classified as a high severity vulnerability due to improper authorization in elunez eladmin.
How do I fix CVE-2025-9937?
To fix CVE-2025-9937, update elunez eladmin to the latest version that applies security patches addressing this flaw.
What component is affected by CVE-2025-9937?
CVE-2025-9937 affects the deleteFile function within the LocalStorageController of elunez eladmin.
Can CVE-2025-9937 be exploited remotely?
Yes, CVE-2025-9937 can be exploited remotely, allowing an attacker to manipulate the improper authorization.
What type of vulnerability is CVE-2025-9937?
CVE-2025-9937 is an improper authorization vulnerability resulting from flaws in access control mechanisms.