PT-2025-47927

Name of the Vulnerable Software and Affected Versions Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas version 8.12.0 Description An issue in OpenAtlas allows a remote attacker to obtain sensitive information via the login error messages. Recommendations At the moment,...

CVE-2025-60914

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

CVE-2025-60917: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter...

Austrian Academy of Sciences OpenAtlas security vulnerabilities

Austrian Academy of Sciences OpenAtlas is a database application dealing with archaeology and history organized by the Austrian Academy of Sciences in Austria. A security vulnerability exists in Austrian Academy of Sciences OpenAtlas versions prior to 8.12.0, which stems from a reflected cross-si...

CVE-2025-60916

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the charge parameter...

CVE-2025-56423

An issue in Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messages...

CVE-2025-60916

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the charge parameter...

CVE-2025-60914: Improper Neutralization of Input During Web Page Generation

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

CVE-2025-60915: Improper Limitation of a Pathname to a Restricted Directory

An issue in the size query parameter /views/file.py of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request...

CVE-2025-56423: Observable Discrepancy

An issue in Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messages...

Austrian Academy of Sciences OpenAtlas security vulnerabilities

Austrian Academy of Sciences OpenAtlas is a database application dealing with archaeology and history organized by the Austrian Academy of Sciences in Austria. A security vulnerability exists in Austrian Academy of Sciences OpenAtlas versions prior to 8.12.0, which stems from improper handling of...

Austrian Academy of Sciences OpenAtlas security vulnerabilities

Austrian Academy of Sciences OpenAtlas is a database application dealing with archaeology and history organized by the Austrian Academy of Sciences in Austria. A security vulnerability exists in Austrian Academy of Sciences OpenAtlas versions prior to 8.12.0, which stems from a reflected cross-si...

CVE-2025-60914

The Austrian Archaeological Institute Openatlas database application is vulnerable to incorrect access control in versions prior to v8.12.0 . An attacker can send a specially crafted GET request to the /display_logo endpoint to bypass security checks and access sensitive information . To remediat...

PT-2025-47928

Name of the Vulnerable Software and Affected Versions Austrian Archaeological Institute Openatlas versions prior to 8.12.0 Description A flaw exists in access control within Austrian Archaeological Institute Openatlas. This allows attackers to gain access to sensitive information by sending a...

CVE-2025-60914

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

Austrian Academy of Sciences OpenAtlas security vulnerabilities

Austrian Academy of Sciences OpenAtlas is a database application dealing with archaeology and history organized by the Austrian Academy of Sciences in Austria. A security vulnerability exists in Austrian Academy of Sciences OpenAtlas versions prior to 8.12.0 that stems from improper access contro...

PT-2025-47933

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter...

CVE-2025-60917

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter...

CVE-2025-60915

The Austrian Archaeological Institute Openatlas database application (versions prior to v8.12.0 ) is vulnerable to a path traversal attack. The root cause is the improper handling of the size query parameter within the /views/file.py component, which allows an attacker to execute the traversal vi...

PT-2025-47931

Name of the Vulnerable Software and Affected Versions Austrian Archaeological Institute Openatlas versions prior to 8.12.0 Description An issue exists in the size query parameter of the /views/file.py component that allows attackers to execute a path traversal via a crafted request. The vulnerabl...