CVE-2025-9241

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-9241

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9241.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-9241

Published

2025-08-20T19:32:05.488Z

Modified

2026-07-15T01:48:52.474321638Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

elunez eladmin exportUser csv injection

Details

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Database specific

{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9241.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.0"
                },
                {
                    "last_affected": "2.0"
                },
                {
                    "introduced": "2.1"
                },
                {
                    "last_affected": "2.1"
                },
                {
                    "introduced": "2.2"
                },
                {
                    "last_affected": "2.2"
                },
                {
                    "introduced": "2.3"
                },
                {
                    "last_affected": "2.3"
                },
                {
                    "introduced": "2.4"
                },
                {
                    "last_affected": "2.4"
                },
                {
                    "introduced": "2.5"
                },
                {
                    "last_affected": "2.5"
                },
                {
                    "introduced": "2.6"
                },
                {
                    "last_affected": "2.6"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-1236",
        "CWE-74"
    ]
}

References

Affected packages

Git / github.com/elunez/eladmin

Affected ranges

Type

GIT

Repo

https://github.com/elunez/eladmin

Events

Introduced

39d480938d27a9630d632578c3ef60cf3647a79e

Last affected

39d480938d27a9630d632578c3ef60cf3647a79e

Database specific

{
    "cpe": "cpe:2.3:a:eladmin:eladmin:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.7"
        },
        {
            "last_affected": "2.7"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

2.*

2.7

v2.*

v2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9241.json"