CVE-2025-53530
Last modified
CVE-2025-53530 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the errorstr parameter. Tests confirmed that the server processes URLs up to 8,142 characters, resulting in high resource consumption, elevated latency, timeouts, and read errors. This makes the server susceptible to Denial of Service (DoS) attacks. This vulnerability is fixed in 3.3.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wegia | Wegia | < 3.3.0 |
References
- https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-562r-xgj9-2r7pExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-53530?
How severe is CVE-2025-53530?
How do I fix CVE-2025-53530?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-53525WeGIA is a web manager for charitable institutions. A Reflec…6.1
- CVE-2025-53526WeGIA is a web manager for charitable institutions. An XSS I…6.1
- CVE-2025-53527WeGIA is a web manager for charitable institutions. A Time-B…9.8
- CVE-2025-53528Cadwyn creates production-ready community-driven modern Stri…7.6
- CVE-2025-53529WeGIA is a web manager for charitable institutions. An SQL I…9.8
- CVE-2025-5353A hardcoded key in Ivanti Workspace Control before version 1…7.8
- CVE-2025-53531WeGIA is a web manager for charitable institutions. The Wegi…7.5
- CVE-2025-53532giscus is a commenting system powered by GitHub Discussions.…5.3
- CVE-2025-53533Pi-hole Admin Interface is a web interface for managing Pi-h…6.1
- CVE-2025-53534RatPanel is a server operation and maintenance management pa…7.7
- CVE-2025-53535Better Auth is an authentication and authorization library f…2.1
- CVE-2025-53536Roo Code is an AI-powered autonomous coding agent. Prior to …8.1
Are you affected by CVE-2025-53530?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST