The WeGIA application before version 3.6.9 contains an Open Redirect vulnerability (CWE-601) in the /WeGIA/controle/control.php endpoint. The nextPage parameter, when combined with metodo=listarTodos or listarId_Nome and nomeClasse=OrigemControle, is not validated or restricted, enabling attackers to redirect users to arbitrary external URLs. This behavior can be exploited for phishing and other social engineering attacks by abusing the trusted domain. The vulnerability is addressed in WeGIA version 3.6.9.

Successful exploitation allows attackers to redirect users from the legitimate WeGIA domain to malicious external websites. This can be used to conduct phishing attacks, steal credentials, distribute malware, or perform social engineering. There is no indication of privilege escalation or direct system compromise from this vulnerability alone. No known exploits in the wild have been reported.

Upgrade the WeGIA application to version 3.6.9 or later, where this Open Redirect vulnerability is fixed. Since this is an application-level issue, applying the official update is the recommended remediation. Patch status is not explicitly stated but the fix is included in version 3.6.9. No alternative mitigations are provided in the advisory.