CVE-2025-61665
Published: 02 October 2025
Summary
CVE-2025-61665 is a high-severity Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability in Wegia Wegia. Its CVSS base score is 8.7 (High).
Operationally, ranked at the 36.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-33209
Vulnerability details
WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial…
more
information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Literacy training teaches users to recognize and avoid actions that result in unauthorized exposure of sensitive information.
Session auditing enables detection of unauthorized exposure or access to sensitive information during user activities.
Audit record review and analysis can detect unauthorized exposure or access to sensitive information.
Penetration testing probes authentication mechanisms for bypasses, allowing identification and fixing of improper authentication issues.
The integrated analysis team enables faster detection and containment of incidents involving unauthorized exposure of sensitive information, limiting attacker success in exploiting such weaknesses.
Security architectures must specify authentication requirements and approaches, making systemic authentication weaknesses harder to introduce.
Trained staff understand data-handling requirements and are less likely to expose sensitive information through misconfiguration or poor design.
Hunting detects anomalous authentication patterns or successful bypasses that allow persistent unauthorized entry.