Open Redirect Vulnerability in WeGIA Web Management Application by LabRedesCefetRJ

CVE-2025-62361

What is CVE-2025-62361?

WeGIA, an open-source web management application tailored for Portuguese-speaking users, contains an Open Redirect vulnerability in the control.php endpoint prior to version 3.5.0. This flaw occurs within the nextPage parameter, allowing adversaries to manipulate the application’s redirect logic. As a result, users can be redirected to untrusted external sites, exposing them to risks such as phishing attacks and the potential theft of sensitive credentials. Mitigation is available in version 3.5.0, where the vulnerability has been addressed to enhance user security.

References