CVE-2025-55744

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-55744
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55744.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-55744
Aliases
Published
2025-08-21T15:51:43.126Z
Modified
2025-12-05T10:20:18.917549Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
UnoPim vulnerable to CSRF on Product edit feature and creation of other types
Details

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55744.json",
    "cwe_ids": [
        "CWE-352"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/unopim/unopim

Affected ranges

Type
GIT
Repo
https://github.com/unopim/unopim
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v0.*

v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.1.4
v0.1.5
v0.1.6
v0.2.0