Beveiligingsadvies

CVE-2025-62361

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-13 21:27:38

Laatst bijgewerkt 2025-10-14 15:15:13

Toegewezen door GitHub_M

CVSS-score 4.8

Status PUBLISHED

Beschrijving

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This vulnerability is fixed in 3.5.0.

← Alle CVE's bekijken Bekijk op cve.org ↗