CVE-2025-58745: WeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE)
WeGIA is a Web manager for charitable institutions. The fix for CVE-2025-22133 was not enough to remediate the arbitrary file upload vulnerability. The WeGIA only check MIME types for Excel files at endpoint /html/socio/sistema/controller/controlaxlsx.php, which can be bypassed by using magic bytes of Excel file in a PHP file. As a result, attacker can upload webshell to the server for remote code execution. Version 3.4.11 contains an updated fix.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58745?
CVE-2025-58745 has been classified as a high severity vulnerability due to its exploitation potential for arbitrary file uploads.
How do I fix CVE-2025-58745?
To fix CVE-2025-58745, ensure that robust file validation and restrictions are implemented beyond just MIME type checking.
What types of files can be uploaded due to CVE-2025-58745?
CVE-2025-58745 allows for arbitrary files to be uploaded, potentially including malicious scripts disguised as Excel files.
Which version of WeGIA is affected by CVE-2025-58745?
CVE-2025-58745 affects all versions of WeGIA that do not implement proper file upload restrictions.
How can I mitigate the risk posed by CVE-2025-58745?
To mitigate CVE-2025-58745, consider implementing stricter file type validation, application whitelisting, and regular security audits.