by Kastro
Paper/Archive/CVE-2025-55169

CVE-2025-55169

LabRedesCefetRJ WeGIA — WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'

EPSS 2%public exploitCVSS 10.0
critical.is priorityof 100
55
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 76.4.764 × 2015.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/download_remessa.php endpoint. This vulnerability could allow an attacker to gain unauthorized access to local files in the server and sensitive information stored in config.php. config.php contains information that could allow direct access to the database. This issue has been patched in version 3.4.8.

Affected

ProductAffectedFixed inSource
WeGIA< 3.4.8–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-mm3p-7573-4x4jrefgithub.com/LabRedesCefetRJ/WeGIA/issues/177refgithub.com/LabRedesCefetRJ/WeGIA/commit/e8476168171de2f3e047ed92bbc264c981b416b1