CVE-2024-53473

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53473
WeGIA 3.2.0 before 3998672 does not verify permission to change a password.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/nilsonLazarin/WeGIA/commit/3998672f1b86db58eab2808a640903d73b37bd2d Patch
https://github.com/nilsonLazarin/WeGIA/issues/791 Exploit Vendor Advisory
https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53473/README.md Exploit Third Party Advisory
https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-53473 Exploit Third Party Advisory
https://www.wegia.org Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:wegia:wegia:3.2.0:*:*:*:*:*:*:*
History

09 Apr 2025, 18:29

Type Values Removed Values Added
CPE cpe:2.3:a:wegia:wegia:3.2.0:*:*:*:*:*:*:*
References () https://github.com/nilsonLazarin/WeGIA/commit/3998672f1b86db58eab2808a640903d73b37bd2d - () https://github.com/nilsonLazarin/WeGIA/commit/3998672f1b86db58eab2808a640903d73b37bd2d - Patch
References () https://github.com/nilsonLazarin/WeGIA/issues/791 - () https://github.com/nilsonLazarin/WeGIA/issues/791 - Exploit, Vendor Advisory
References () https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53473/README.md - () https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53473/README.md - Exploit, Third Party Advisory
References () https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-53473 - () https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-53473 - Exploit, Third Party Advisory
References () https://www.wegia.org - () https://www.wegia.org - Product
First Time Wegia
Wegia wegia

03 Jan 2025, 17:15

Type Values Removed Values Added
References
  • () https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53473/README.md -

12 Dec 2024, 02:07

Type Values Removed Values Added
CWE CWE-862
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
Summary
  • (es) WeGIA 3.2.0 anterior a 3998672 no verifica el permiso para cambiar una contraseña.

07 Dec 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-07 23:15

Updated : 2025-04-09 18:29

NVD link : CVE-2024-53473

Mitre link : CVE-2024-53473

CVE.ORG link : CVE-2024-53473

JSON object : View

Products Affected

wegia

  • wegia
CWE
CWE-862

Missing Authorization