CVE-2025-3250

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-3250

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3250.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-3250

Published

2025-04-04T15:00:15.814Z

Modified

2026-07-15T01:48:58.299522731Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

elunez eladmin Maintenance Management Module testConnect deserialization

Details

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cwe_ids": [
        "CWE-20",
        "CWE-502"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3250.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.7"
                },
                {
                    "last_affected": "2.7"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/elunez/eladmin

Affected ranges

Type

GIT

Repo

https://github.com/elunez/eladmin

Events

Introduced

39d480938d27a9630d632578c3ef60cf3647a79e

Last affected

39d480938d27a9630d632578c3ef60cf3647a79e

Database specific

{
    "cpe": "cpe:2.3:a:eladmin:eladmin:2.7:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.7"
        },
        {
            "last_affected": "2.7"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*

2.7

v2.*

v2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3250.json"