Elunez vulnerabilities
We track 4 vulnerabilities in Elunez products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.
Latest Elunez vulnerabilities
- 7.5 High severity
eladmin: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
- 7.5 High severity
eladmin: Use of Hard-coded Credentials
A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipul
- 7.2 High severity
eladmin: Deserialization of Untrusted Data
A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may
- 9.8 Critical severity
eladmin: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the