Unopim
Monthly
Integration management routes in UnoPim before 2.1.3 are absent from the application's ACL map, meaning the Bouncer middleware never enforces permission checks on those endpoints regardless of the authenticated admin's assigned role. Any low-privilege admin - including one restricted to dashboard-only access - can directly POST to the integration store, update, key-generation, and secret-regeneration routes to create OAuth API integrations and mint client credentials for arbitrary admin accounts, effectively escalating their permissions. A vendor-released patch exists in v2.1.3 and a public researcher writeup (geo-chen/oss) confirms the issue; no public exploit tool or CISA KEV listing has been identified at time of analysis.
Authenticated administrators in UnoPim before version 2.1.5 can achieve full server-side remote code execution by uploading arbitrary PHP files through the TinyMCE image upload endpoint, which performs no file extension or MIME type validation before writing files to the public storage disk. The server response discloses the uploaded file's URL, enabling direct invocation of the web shell and arbitrary OS command execution under the web server process context. A publicly available proof-of-concept and vendor-released patch (v2.1.5) both exist; no CISA KEV listing was identified at time of analysis.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated low severity (CVSS 2.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Integration management routes in UnoPim before 2.1.3 are absent from the application's ACL map, meaning the Bouncer middleware never enforces permission checks on those endpoints regardless of the authenticated admin's assigned role. Any low-privilege admin - including one restricted to dashboard-only access - can directly POST to the integration store, update, key-generation, and secret-regeneration routes to create OAuth API integrations and mint client credentials for arbitrary admin accounts, effectively escalating their permissions. A vendor-released patch exists in v2.1.3 and a public researcher writeup (geo-chen/oss) confirms the issue; no public exploit tool or CISA KEV listing has been identified at time of analysis.
Authenticated administrators in UnoPim before version 2.1.5 can achieve full server-side remote code execution by uploading arbitrary PHP files through the TinyMCE image upload endpoint, which performs no file extension or MIME type validation before writing files to the public storage disk. The server response discloses the uploaded file's URL, enabling direct invocation of the web shell and arbitrary OS command execution under the web server process context. A publicly available proof-of-concept and vendor-released patch (v2.1.5) both exist; no CISA KEV listing was identified at time of analysis.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated low severity (CVSS 2.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.