CVE-2025-55169: WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/downloadremessa.php endpoint. This vulnerability could allow an attacker to gain unauthorized access to local files in the server and sensitive information stored in config.php. config.php contains information that could allow direct access to the database. This issue has been patched in version 3.4.8.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55169?
CVE-2025-55169 is classified as a medium severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2025-55169?
To fix CVE-2025-55169, upgrade the WeGIA application to version 3.4.8 or later where this vulnerability has been addressed.
What type of vulnerability is CVE-2025-55169?
CVE-2025-55169 is a path traversal vulnerability found in the WeGIA application's download endpoint.
What versions of WeGIA are affected by CVE-2025-55169?
CVE-2025-55169 affects all versions of WeGIA prior to version 3.4.8.
Is CVE-2025-55169 being actively exploited?
As of now, there is no public information indicating that CVE-2025-55169 is actively being exploited, but it is recommended to patch the vulnerability promptly.