Vulnerability Description
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy like Burp suite. Make changes to the file extension and content. The vulnerability is fixed in 0.2.1.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Webkul | Unopim | < 0.2.1 |
Related Weaknesses (CWE)
References
- https://drive.proton.me/urls/PH1ESMKHMW#4Vxb2KNu3tmnExploit
- https://github.com/unopim/unopim/security/advisories/GHSA-v22v-xwh7-2vrmExploitVendor Advisory
FAQ
What is CVE-2025-55743?
CVE-2025-55743 is a vulnerability with a CVSS score of 8.8 (HIGH). UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type val...
How severe is CVE-2025-55743?
CVE-2025-55743 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-55743?
Check the references section above for vendor advisories and patch information. Affected products include: Webkul Unopim.