CVE-2025-58745

CVE-2025-58745 is an arbitrary file upload vulnerability affecting WeGIA versions prior to 3.4.11. An attacker can bypass MIME type checks for Excel files at the /html/socio/sistema/controller/controla_xlsx.php endpoint by embedding Excel magic bytes within a PHP file. This allows for the upload of webshells, leading to remote code execution. The vulnerability carries a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Successful exploitation grants an unauthenticated attacker full control over the affected server. While there is no evidence of active exploitation or publicly available exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions, suggesting awareness and potential future exploitation. Organizations using WeGIA should upgrade to version 3.4.11 or later immediately.