PT-2025-15267 · Una Cms · Unak-Cms

Published 2025-04-07 · Updated 2025-04-16 · CVE-2025-32101

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions UNA CMS versions <= 14.0.0-RC4

Description The issue is related to PHP Object Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Technical details about exploitation are not specified.

Recommendations For UNA CMS versions <= 14.0.0-RC4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-32101

Affected Products

Unak-Cms

References · 8

• https://twitter.com/pdnuclei_bot/status/1910362145826525555 · Twitter Post
• https://t.me/rnetsec/21433 · Telegram Post
• https://twitter.com/vuldb/status/1911761142550258022 · Twitter Post
• https://twitter.com/_r_netsec/status/1912377437532614729 · Twitter Post
• https://t.me/defcon_news/129574 · Telegram Post
• https://t.me/secharvester/18677 · Telegram Post
• https://twitter.com/secharvesterx/status/1909395889405239557 · Twitter Post
• https://twitter.com/_r_netsec/status/1909270716689838517 · Twitter Post