PT-2025-41822

CVE-2025-62361

Published

2025-10-13

Updated

2026-10-08

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.0

Description WeGIA is a Web Manager for Institutions focused on Portuguese language users. A flaw exists that allows redirection to arbitrary external domains via the nextPage parameter in the ''control.php'' endpoint (metodo=listarTodos nomeClasse=AlmoxarifeControle). This can be used for phishing, distributing malicious payloads, or stealing user credentials.

Recommendations Update to version 3.5.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Marcelomulder

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers