PT-2025-9513 · Wegia · Wegia

Rafaelcorvino1 · Published 2025-03-03 · Updated 2025-03-07 · CVE-2025-27419

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.2.16

Description A Denial of Service (DoS) issue exists, allowing any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. This is caused by recursive crawling of dynamically generated URLs and insufficient handling of large volumes of requests.

Recommendations For versions prior to 3.2.16, update to version 3.2.16 to resolve the issue.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-27419

GHSA-9RP6-4MQP-G4P8

Affected Products

Wegia

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27419.json · Exploit
• https://github.com/LabRedesCefetRJ/WeGIA/commit/624ddfadb3fd8f8b30ad4f601b032a9bacc86a39 · Patch
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9rp6-4mqp-g4p8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27419 · Security Note
• https://twitter.com/CVEnew/status/1896767610676506856 · Twitter Post
• https://t.me/cvedetector/19391 · Telegram Post
• https://twitter.com/dailycve/status/1898119885714067551 · Twitter Post