CVE-2025-60915: Craws Openatlas

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request.

Affected products

• Craws Openatlas: up to and including 8.12.0

Published 2025-11-24. Last modified 2026-06-17.