CVE-2025-53821

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirect vulnerability exists in the web application prior to version 3.4.5. The control.php endpoint allows to specify an arbitrary URL via the `nextPage` parameter, leading to an uncontrolled redirection. Version 3.4.5 contains a fix for the issue.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

4.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

EPSS

0.22% chance of exploitation in the next 30 days, 13th percentile

Published

2025-07-14

Updated

2025-07-15

Proof-of-concept exploits (1)

• LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f5c2-jmm6-v2c5

References

• CVE Record
• NVD entry

Related

• CVE-2025-53820
• CVE-2025-53822
• CVE-2025-53817
• CVE-2025-53823
• CVE-2025-53816
• CVE-2025-53824