p PatchFirst

CVE-2025-55744

CVE-2025-55744 · UnoPim vulnerable to CSRF on Product edit feature and creation of other types

This page contains facts from public vulnerability sources. Check the original advisory before updating.

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

CVSS 6.9 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • unopim

    Versions
    • < 0.2.1: Affected

    No fix published

  • unopim/unopim Packagist

    Versions
    • v0.1.0
    • v0.1.1
    • v0.1.2
    • v0.1.3
    • v0.1.4
    • v0.1.5
    • v0.1.6
    • v0.2.0
    Affected ranges
    • ECOSYSTEM: < 0.2.1

    Update to 0.2.1

Original sources

Check your server →