Laravel · Laravel · CVE-2025-55741
Name of the Vulnerable Software and Affected Versions:
UnoPim versions 0.3.0 and earlier
Description:
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Users lacking the necessary Delete privilege for products can bypass access controls by submitting requests to the mass-delete `endpoint`, enabling unauthorized product deletion. This can lead to potential data loss and business disruption.
Recommendations:
Update to version 0.3.1 or later.