Executive brief
UnoPim has Broken Access Control
Affected products
- Packagist unopim/unopim
Junglewise Threat Intelligence
CVE-2025-55741: UnoPim has Broken Access Control
CVE-2025-55741 · Severity: low · CVSS 3.1 · Published 2025-08-22
Technologies: unopim/unopim (Packagist). Vendors: Packagist.
Related threats
- UnoPim has CSV Injection on Quick Export feature
- UnoPim vulnerable to CSRF on Product edit feature and creation of other types
- UnoPim arbitrary file upload in user creation image upload
- UnoPim has Stored Cross-site Scripting vulnerability in user creation functionality
- UnoPim Stored XSS : Cookie hijacking through Create User function