VULNERABILITY INTELLIGENCE

CVE-2025-61665

CVSS score8.7 HIGH

EPSS probability0.47%

CISA KEVNot currently listed

Published2025-10-02

Last modified2026-10-12

Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.