PT-2025-40425

CVE-2025-61604

Published

2025-10-02

Updated

2025-10-07

Description by

CVSS 3.1

7.1

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions WeGIA versions 3.4.12 and below

Description WeGIA, a web manager designed for charitable institutions, is susceptible to a Cross-Site Request Forgery (CSRF) issue. The deletion function for the Almoxarifado entity is accessible through an HTTP GET request lacking CSRF protection. This allows an attacker to initiate the deletion process using a victim's active session on a malicious website.

Recommendations Update to version 3.5.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

Related identifiers

CVE-2025-61604