Listen to this Post
How the CVE Works
The vulnerability exists in WeGIA’s `control.php` endpoint, which fails to properly validate user-supplied input in the `nextPage` parameter. Attackers can craft malicious URLs containing arbitrary domains, tricking users into visiting untrusted sites. When a victim clicks the manipulated link, the application redirects them without proper sanitization. This could facilitate phishing attacks by making malicious URLs appear legitimate. The flaw was patched in version 3.4.5 by implementing strict URL validation.
DailyCVE Form
Platform: WeGIA
Version: < 3.4.5
Vulnerability: Open Redirect
Severity: Medium
Date: 07/14/2025
Prediction: Patch expected by 08/01/2025
What Undercode Say
curl -I "http://target/control.php?nextPage=http://malicious.com"
import requests
r = requests.get("http://target/control.php", params={"nextPage": "http://evil.com"})
How Exploit
- Craft malicious URL with `nextPage` parameter
- Distribute via phishing emails
- Bypass domain trust checks
Protection from this CVE
- Update to 3.4.5
- Validate redirect URLs
- Implement allowlisting
Impact
- Phishing attacks
- Credential theft
- Session hijacking
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
