Password Reset Vulnerability in WeGIA from LabRedesCefetRJ

CVE-2025-30361

What is CVE-2025-30361?

A significant security flaw has been identified in WeGIA, a web management tool for charitable organizations, affecting versions prior to 3.2.6. This vulnerability allows an unauthorized attacker to reset any user's password, including admin accounts, without the need to verify the old password. This breach occurs through the control.php endpoint, which enables attackers to bypass critical authentication and authorization processes. Version 3.2.6 addresses and resolves this issue, making it essential for users to update immediately to secure their accounts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References