PT-2025-29517 · Wegia · Wegia

Whyrusx · Publicado 2025-07-12 · Atualizado 2025-07-15 · CVE-2025-53822

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5

Description: WeGIA is an open source web manager. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the relatorio geracao.php endpoint. Attackers can inject malicious scripts through the tipo relatorio parameter.

Recommendations: Update to version 3.4.5 or later. As a temporary workaround, restrict access to the relatorio geracao.php endpoint. Avoid using the tipo relatorio parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-12693

CVE-2025-53822

GHSA-F5XR-4G63-PC9R

Produtos afetados

Wegia

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53822.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f5xr-4g63-pc9r · Exploit
• https://t.me/cvetracker/27824 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2025-12693 · Nota de Segurança
• https://twitter.com/CVEnew/status/1944889704890896857 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1944923621782163926 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-53822 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-53822 · Nota de Segurança
• https://t.me/cvenotify/128945 · Publicação no Telegram