CVE-2025-60915 | Austrian Archaeological Institute OpenAtlas up to 8.11.x Query Parameter /views/file.py size path traversal

November 24, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Austrian Archaeological Institute OpenAtlas up to 8.11.x. This impacts an unknown function of the file /views/file.py of the component Query Parameter Handler. This manipulation of the argument size causes path traversal.

This vulnerability is tracked as CVE-2025-60915. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More