CVE-2025-60914

Publication date

2025-11-24 00:00:00

Family

mitre

State

PUBLISHED

Description

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /display_logo endpoint.