CSWeb vulnerabilities

2 known vulnerabilities in CSWeb from Census. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CSWeb: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-60949Mar 23, 2026Census

  Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.

• 8.8 High severity

  CSWeb: Unrestricted Upload of File with Dangerous Type

  CVE-2025-60947Mar 23, 2026Census

  Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha.