PT-2025-40427

CVE-2025-61606

Published

2025-10-02

Updated

2025-10-07

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WeGIA versions 3.4.12 and below

Description WeGIA is a web manager designed for charitable institutions. An Open Redirect issue exists in the control.php endpoint, specifically through the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This allows attackers to redirect users to external domains, potentially enabling phishing, malicious payload distribution, or credential theft.

Recommendations Update to version 3.5.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Marcelomulder

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers