CVE-2025-55743

EUVD-2025-25455
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy like Burp suite. Make changes to the file extension and content. The vulnerability is fixed in 0.2.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
webkulunopim
𝑥
< 0.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://drive.proton.me/urls/PH1ESMKHMW#4Vxb2KNu3tmn
https://github.com/unopim/unopim/security/advisories/GHSA-v22v-xwh7-2vrm