ByteOS Network

NVD Vulnerability Details :

CVE-2025-53821

Analyzed

Source-security-advisories@github.com

Published At-14 Jul, 2025 | 23:15

Updated At-18 Jul, 2025 | 20:08

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirect vulnerability exists in the web application prior to version 3.4.5. The control.php endpoint allows to specify an arbitrary URL via the `nextPage` parameter, leading to an uncontrolled redirection. Version 3.4.5 contains a fix for the issue.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.7	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Primary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CPE Matches

wegia>>wegia>>Versions before 3.4.5(exclusive)

cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-601	Secondary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f5c2-jmm6-v2c5	security-advisories@github.com	Exploit Vendor Advisory
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f5c2-jmm6-v2c5	134c704f-9b21-4f2e-91b3-4a467353bcc0	Exploit Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History