PT-2025-28221 · Wegia · Wegia

Rafaelcorvino1 · Published 2025-07-07 · Updated 2025-07-10 · CVE-2025-53531

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.3.0

Description: The WeGIA server has a vulnerability that allows excessively long HTTP GET requests to a specific URL, resulting from the lack of validation for the length of the fid parameter. This issue can cause high resource consumption, elevated latency, timeouts, and read errors, making the server susceptible to Denial of Service (DoS) attacks.

Recommendations: For versions prior to 3.3.0, update to version 3.3.0 to fix the vulnerability and prevent DoS attacks. As a temporary workaround, consider restricting the length of the fid parameter in HTTP GET requests to prevent excessive resource consumption.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-53531

GHSA-4FFC-F23J-54M3

Affected Products

Wegia

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53531.json · Exploit
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4ffc-f23j-54m3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53531 · Security Note
• https://twitter.com/VulmonFeeds/status/1942291708181426203 · Twitter Post
• https://t.me/cvenotify/128454 · Telegram Post
• https://twitter.com/CVEnew/status/1942276675569627575 · Twitter Post
• https://twitter.com/CveFindCom/status/1942269733337714850 · Twitter Post