CVE-2025-60947

CVE-2025-60947: Census CSWeb 8.0.1 contains an arbitrary file upload vulnerability. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. The issue is fixed in 8.1.0 alpha.

CVE-2025-60946

CVE-2025-60946 affects Census CSWeb. In CSWeb 8.0.1, an arbitrary file path input vulnerability enables path traversal, potentially exposing sensitive directories to a remote, authenticated attacker. Impact is described as high for confidentiality, integrity, and availability in the CVSS metrics....