The vulnerability is an unvalidated open redirect in the WeGIA web manager. Attackers can supply a crafted nextPage parameter to the listarTodos action and cause unsuspecting users to be redirected to arbitrary external sites. This can be used for phishing, credential harvesting, malware delivery, and other social engineering attacks that exploit the trust of the WeGIA domain. The weakness is a classic CWE‑601 type of open redirect.

WeGIA applications built by LabRedesCefetRJ, specifically versions prior to 3.6.9, are affected. The vulnerability exists in the /WeGIA/controle/control.php endpoint when the nextPage parameter is present together with metodo=listarTodos and nomeClasse=EstoqueControle.

The CVSS score of 5.1 indicates moderate severity, and the EPSS score is below 1%, suggesting a low probability of exploitation. It is not listed in the CISA KEV catalog. The likely attack vector is a web‑browser based attack; an attacker can simply lure a user to a malicious URL that includes the vulnerable parameter. If successful, the user would be redirected to a malicious site, potentially leading to credential theft or malware infection.