CNNVD-202508-1321 Information
CNNVD ID
CNNVD-202508-1321
Related CVE
- CNNVD Published: 2025-08-12
Description (Chinese)
WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA 3.4.8之前版本存在授权问题漏洞，该漏洞源于/html/personalizacao_remover.php端点缺少身份验证，可能导致任意图像文件删除。
Description (English)
WeGIA is the network manager of a welfare institution of the Nelson Lazarin personal developer. The previous version of WeGIA 3.4.8 had a mandate gap, which stemmed from the lack of authentication at the /html/personalizacao remover.php endpoint, which could lead to the deletion of any image file.
Hazard Level
Medium
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2025-08-12
Last Modified
2026-02-24
References
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8rm5-3jvx-hcxv https://github.com/LabRedesCefetRJ/WeGIA/commit/aa63f499a285bf91795b9836eec0425e7eafe570 https://github.com/LabRedesCefetRJ/WeGIA/issues/109 https://access.redhat.com/security/cve/cve-2025-55171
Patch
https://github.com/LabRedesCefetRJ/WeGIA/releases
Share on: