PT-2025-28220 · Wegia · Wegia

Rafaelcorvino1 · Published 2025-07-07 · Updated 2025-08-04 · CVE-2025-53530

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.3.0

Description: The WeGIA server has a vulnerability that allows excessively long HTTP GET requests to a specific URL, resulting from the lack of validation for the length of the errorstr parameter. This issue leads to high resource consumption, elevated latency, timeouts, and read errors, making the server susceptible to Denial of Service (DoS) attacks.

Recommendations: For versions prior to 3.3.0, update to version 3.3.0 to resolve the issue. As a temporary workaround, consider restricting the length of HTTP GET requests to prevent excessive resource consumption.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-53530

GHSA-562R-XGJ9-2R7P

Affected Products

Wegia

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53530.json · Exploit
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-562r-xgj9-2r7p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53530 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53530 · Security Note
• https://twitter.com/DavidMarquet19/status/1952329675138580874 · Twitter Post
• https://twitter.com/CVEnew/status/1942276677255716949 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1942294268032201119 · Twitter Post
• https://twitter.com/CveFindCom/status/1942269793437909032 · Twitter Post