Beveiligingsadvies

CVE-2025-26614

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-18 20:32:48

Laatst bijgewerkt 2025-02-18 21:35:32

Toegewezen door GitHub_M

CVSS-score 9.4

Status PUBLISHED

Beschrijving

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_documento.php` endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗