WeGIA Stored Cross-Site Scripting Vulnerability in Document Type Management Endpoint

A stored cross-site scripting vulnerability has been identified in the WeGIA application, specifically in versions prior to 3.2.17. The issue resides in the 'adicionar_tipo_docs_atendido.php' endpoint, where the 'tipo' parameter is vulnerable to script injection. Malicious scripts injected through this parameter are stored on the server and executed automatically when the affected page is accessed by users, creating a significant security risk. This vulnerability allows for various attacks, including session hijacking, credential theft, and the distribution of malware.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user accessing the page. This could lead to session hijacking, credential theft, and the execution of malicious actions on behalf of the user.

Reproduction

To reproduce this vulnerability, send a POST request to the 'adicionar_tipo_docs_atendido.php' endpoint with a payload in the 'tipo' parameter that includes a script, such as an image tag with an 'onerror' event. Once the payload is injected, it will be executed automatically when the page is accessed.

Remediation

Users can update to WeGIA version 3.2.17 or later, where this vulnerability has been patched.