PT-2025-29516 · Wegia · Wegia

Whyrusx · Published 2025-07-12 · Updated 2025-07-20 · CVE-2025-53821

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5

Description: WeGIA is an open source web manager. An Open Redirect issue exists in the web application due to an uncontrolled redirection. The control.php API endpoint allows specification of an arbitrary URL via the nextPage parameter.

Recommendations: Update to version 3.4.5 or later. As a temporary workaround, restrict access to the control.php endpoint. Avoid using the nextPage parameter in the control.php endpoint until the issue is resolved.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2025-12694

CVE-2025-53821

GHSA-F5C2-JMM6-V2C5

Affected Products

Wegia

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53821.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f5c2-jmm6-v2c5 · Exploit
• https://osv.dev/vulnerability/CVE-2025-53821 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12694 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-53821 · Security Note
• https://twitter.com/CVEnew/status/1944889705826279857 · Twitter Post
• https://twitter.com/AskPerplexity/status/1946928997067071744 · Twitter Post
• https://t.me/cvenotify/128944 · Telegram Post
• https://twitter.com/scp_localhost/status/1946928704782844401 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1944926181708431614 · Twitter Post
• https://t.me/cvenotify/129511 · Telegram Post
• https://t.me/cvetracker/27823 · Telegram Post