CVE-2025-61606
WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0.
Vendor
Product
CWE
Yayın Tarihi
2025-10-02 21:16:01
Güncelleme
2025-10-07 15:41:49
Source Identifier
security-advisories@github.com
KEV Date Added
-