Authentication Bypass Vulnerability in WeGIA Web Manager
CVE-2025-55171

7.5HIGH

Key Information:

Vendor: Labredescefetrj
Status: Wegia
Vendor: CVE Published:; 12 August 2025

🔔 Create Labredescefetrj Vulnerability Alert

What is CVE-2025-55171?

WeGIA, an open-source web management system primarily serving Portuguese-speaking charitable organizations, harbors a significant vulnerability prior to version 3.4.8. The flaw exists due to inadequate authentication checks at the endpoint /html/personalizacao_remover.php, enabling unauthenticated attackers to delete any image files simply by providing the image ID via the 'imagem_0' parameter. This vulnerability exposes the system to potential data loss and misuse, highlighting the importance of timely updates and robust authentication mechanisms.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch