Critical · published January 17, 2025
🚨 A single unverified field is the key to a password heist! With WeGIA versions < 3.2.0, an attacker can change any user’s password without even knowing their old one! 🔥 Think of it like a hotel check-in desk that hands out new room keys without confirming the identity of the guest — anyone can waltz in and access your suite without a hitch! This critical vulnerability allows any malicious actor to hijack user accounts with nothing more than a clever input. If an attacker exploits this flaw, they can lock users out and access sensitive information, making it a potentially devastating breach!
Think of it like a hotel check-in desk that hands out new room keys without confirming the identity of the guest — anyone can waltz in and access your suite without a hitch! The flaw resides in the controle/control.php file, where the application fails to validate the old password, enabling unauthorized password changes simply by inputting any value into the 'senha_antiga' field.
This critical vulnerability allows any malicious actor to hijack user accounts with nothing more than a clever input. If an attacker exploits this flaw, they can lock users out and access sensitive information, making it a potentially devastating breach! Update WeGIA to version 3.2.0 or later immediately to patch this vulnerability. Additionally, implement proper validation procedures for password change requests to ensure users verify their old passwords before making changes. Don't forget to audit your application for similar access control weaknesses! You've got this! With these steps, you’ll lock down your systems and keep the internet a safer place! 🛡️