cve/2024/CVE-2024-57032.md

CVE-2024-57032

Description

WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senha_antiga field.

POC

Reference

• https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-57032

Github

• https://github.com/CVE-Hunters/cve-hunters
• https://github.com/Sec-Dojo-Cyber-House/cve-hunters
• https://github.com/cnetsec/south-america-cve-hall