CVE-2025-9239

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-9239

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9239.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-9239

Published

2025-08-20T18:02:08.454Z

Modified

2026-07-15T01:49:11.899969604Z

Severity

6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X CVSS Calculator

Summary

elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption

Details

A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argument STR_PARAM with the input Passw0rd leads to inadequate encryption strength. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.0"
                },
                {
                    "last_affected": "2.0"
                },
                {
                    "introduced": "2.1"
                },
                {
                    "last_affected": "2.1"
                },
                {
                    "introduced": "2.2"
                },
                {
                    "last_affected": "2.2"
                },
                {
                    "introduced": "2.3"
                },
                {
                    "last_affected": "2.3"
                },
                {
                    "introduced": "2.4"
                },
                {
                    "last_affected": "2.4"
                },
                {
                    "introduced": "2.5"
                },
                {
                    "last_affected": "2.5"
                },
                {
                    "introduced": "2.6"
                },
                {
                    "last_affected": "2.6"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9239.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-310",
        "CWE-326"
    ]
}

References

Affected packages

Git / github.com/elunez/eladmin

Affected ranges

Type

GIT

Repo

https://github.com/elunez/eladmin

Events

Introduced

39d480938d27a9630d632578c3ef60cf3647a79e

Last affected

39d480938d27a9630d632578c3ef60cf3647a79e

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "2.7"
        },
        {
            "last_affected": "2.7"
        },
        {
            "introduced": "0"
        }
    ],
    "cpe": "cpe:2.3:a:eladmin:eladmin:*:*:*:*:*:*:*:*"
}

Affected versions

2.*

2.7

v2.*

v2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9239.json"