CVE-2025-62361: WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This vulnerability is fixed in 3.5.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WeGIAto a version that resolves this vulnerability.Fixed in 3.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62361?
CVE-2025-62361 has been identified as an Open Redirect vulnerability in WeGIA prior to version 3.5.0.
How do I fix CVE-2025-62361?
To fix CVE-2025-62361, update WeGIA to version 3.5.0 or later.
What impact does CVE-2025-62361 have on users?
CVE-2025-62361 can allow attackers to redirect users to malicious sites under certain conditions.
Which versions of WeGIA are affected by CVE-2025-62361?
CVE-2025-62361 affects WeGIA versions before 3.5.0.
Is there a potential exploit for CVE-2025-62361?
Yes, attackers may exploit the Open Redirect vulnerability in CVE-2025-62361 to perform phishing attacks.