BaseFortify

Publication date: 2025-10-13

Last updated on: 2025-10-20

Assigner: GitHub, Inc.

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This vulnerability is fixed in 3.5.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-13

Last Modified

2025-10-20

Generated

2026-07-06

AI Q&A

2025-10-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-62361

Affected Vendors & Products

Vendor	Product	Version / Range
wegia	wegia	to 3.5.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-601	The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

Executive Summary

This vulnerability is an Open Redirect in the WeGIA application prior to version 3.5.0. It occurs in the control.php endpoint, specifically in the nextPage parameter. An attacker can exploit this to redirect users to arbitrary external domains, which can be used for phishing, distributing malicious payloads, or stealing user credentials.

Impact Analysis

The vulnerability can impact you by allowing attackers to redirect your users to malicious websites. This can lead to phishing attacks, where users may be tricked into revealing sensitive information, distribution of malware, or theft of user credentials, potentially compromising user accounts and data.

Mitigation Strategies

Upgrade the WeGIA application to version 3.5.0 or later, as this version contains the fix for the Open Redirect vulnerability in the control.php endpoint's nextPage parameter.

Hi! I’m here to help you understand CVE-2025-62361. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70