CVE-2024-44677

CRITICAL 9.8CVE-2024-44677 · Published 10/09/2024 · updated 17/06/2026

In short

CVE-2024-44677 is a CRITICAL (CVSS 9.8) vulnerability affecting eladmin (eladmin).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eladmin eladmin	`≤ 2.7`	No fix yet

Description

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.

References

elunez/eladmin · Product
jcxj/jcxj · Exploit
l1uyi/cve-list

More vulnerabilities in eladmin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

eladmin

≤ 2.7

No fix yet

More vulnerabilities in eladmin

See all →