← Database

CVE-2024-57032

CRITICAL CVSS: 9.8 Published: 2025-01-17 Modified: 2026-06-17

Description

WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senha_antiga field.

Affected Platforms

Wegia Wegia

Weakness Type

CWE-863, CWE-284

References