Open Redirect Vulnerability in WeGIA Web Management Application by LabRedesCefetRJ
CVE-2025-62361
What is CVE-2025-62361?
WeGIA, an open-source web management application tailored for Portuguese-speaking users, contains an Open Redirect vulnerability in the control.php endpoint prior to version 3.5.0. This flaw occurs within the nextPage parameter, allowing adversaries to manipulate the application’s redirect logic. As a result, users can be redirected to untrusted external sites, exposing them to risks such as phishing attacks and the potential theft of sensitive credentials. Mitigation is available in version 3.5.0, where the vulnerability has been addressed to enhance user security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WeGIA < 3.5.0
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved
