← CVE Intelligence

CVE-2025-9937

elunez eladmin LocalStorageController deleteFile improper authorization PUBLISHED

Description (CNA)

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

Affected (CNA)

Vendor / productVersions
elunez / eladminaffected 1.1

CWE

CWE-285, CWE-266

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.