Openatlas vulnerabilities

2 known vulnerabilities in Openatlas from Craws. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Openatlas: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-60915Nov 24, 2025Craws

  An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request.

• 8.1 High severity

  Openatlas: Improper Neutralization of Input During Web Page Generation

  CVE-2025-51534Aug 4, 2025Craws

  A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field.