CVE-2025-55171

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55171
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, the application does not check authentication at endpoint /html/personalizacao_remover.php allowing anonymous attacker (without login) to delete any Image files at endpoint /html/personalizacao_remover.php by defining imagem_0 as image id to delete. This issue has been patched in version 3.4.8.
CVSS

No CVSS.

References
Link Resource
https://github.com/LabRedesCefetRJ/WeGIA/commit/aa63f499a285bf91795b9836eec0425e7eafe570 Patch
https://github.com/LabRedesCefetRJ/WeGIA/issues/109 Issue Tracking
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8rm5-3jvx-hcxv Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*
History

14 Aug 2025, 01:33

Type Values Removed Values Added
CPE cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*
First Time Wegia
Wegia wegia
References () https://github.com/LabRedesCefetRJ/WeGIA/commit/aa63f499a285bf91795b9836eec0425e7eafe570 - () https://github.com/LabRedesCefetRJ/WeGIA/commit/aa63f499a285bf91795b9836eec0425e7eafe570 - Patch
References () https://github.com/LabRedesCefetRJ/WeGIA/issues/109 - () https://github.com/LabRedesCefetRJ/WeGIA/issues/109 - Issue Tracking
References () https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8rm5-3jvx-hcxv - () https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8rm5-3jvx-hcxv - Third Party Advisory

12 Aug 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-12 21:15

Updated : 2025-08-14 01:33

NVD link : CVE-2025-55171

Mitre link : CVE-2025-55171

JSON object : View

Products Affected

wegia

  • wegia
CWE
CWE-287

Improper Authentication