CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-12-07

Last modified

2025-01-03

Weaknesses

CWE-862

Affected products

• Wegia (Wegia)

References

• https://github.com/nilsonLazarin/WeGIA/commit/3998672f1b86db58eab2808a640903d73b37bd2d
• https://github.com/nilsonLazarin/WeGIA/issues/791
• https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53473/README.md
• https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-53473
• https://www.wegia.org