CNNVD-202511-2632 Information
CNNVD ID
CNNVD-202511-2632
Related CVE
- CNNVD Published: 2025-11-24
Description (Chinese)
Austrian Academy of Sciences OpenAtlas是奥地利Austrian Academy of Sciences组织的一个处理考古和历史学数据库应用。 Austrian Academy of Sciences OpenAtlas 8.12.0之前版本存在安全漏洞，该漏洞源于/views/file.py中size参数处理不当，可能导致路径遍历。
Description (English)
Austrian Academy of Science Open Atlas is an archaeological and historical database application of Austrian Austrian Academy of Science. There was a security loophole in the pre-Atlas 8.12.0 that originated from the inappropriate handling of the parameters of /views/file.py in the middle size, which could lead to routing.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Austrian Academy of Sciences
Published
2025-11-24
Last Modified
2026-02-24
References
https://www.sec4you-pentest.com/schwachstelle/openatlas-schwachstelle-lfi-konfigurationsdatei-exfiltration/ https://www.sec4you-pentest.com/schwachstellen/ https://access.redhat.com/security/cve/cve-2025-60915