CVE-2025-60914: Craws Openatlas

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /display_logo endpoint.

Affected products

• Craws Openatlas: up to and including 8.12.0

Published 2025-11-24. Last modified 2026-06-17.