WeGIA Open Redirect Vulnerability

An open redirect vulnerability exists in WeGIA versions prior to 3.6.9. The issue arises because the redirect parameter is directly taken from the URL query string without any validation or whitelist check. This unvalidated input is then used verbatim in a 'Location' header, allowing for unauthorized redirection.

Impact

Exploitation of this vulnerability can lead to open redirect, allowing attackers to redirect users to malicious sites or phishing pages. This could interfere with authentication processes and damage user trust in the WeGIA platform.

Reproduction

To reproduce this vulnerability, send a GET request to 'WeGIA/html/configuracao/atualizacao.php' with a 'redirect' parameter containing the desired URL for redirection. The absence of URL validation will allow the redirect to occur as specified.

Remediation

Users can update to WeGIA version 3.6.9 or later, where this vulnerability has been patched.