CyberSecBulletin

Eladmin vulnerabilities

We track 2 vulnerabilities in Eladmin products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2024.

2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score

Latest Eladmin vulnerabilities

  • 7.2 High severity

    eladmin: Improper Control of Generation of Code

    CVE-2024-51243Eladmin

    The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment servers of this management system via DeployController.java.

  • 9.8 Critical severity

    eladmin: Server-Side Request Forgery

    CVE-2024-44677Eladmin

    eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.