openatlas vulnerabilities and fixes

Recent CVEs affecting openatlas, with upgrade or downgrade steps. 16 tracked.

openatlas has 16 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-11-24. Highest priority: CVE-2025-51536 (score 61/100).

• CVE-2025-40702 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40703 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40704 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40705 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40706 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40707 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40708 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-40709 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities a
• CVE-2025-60917 MEDIUM 4.6 UPGRADE A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeolog
• CVE-2025-60916 MEDIUM 5.4 UPGRADE A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeolog
• CVE-2025-60915 HIGH 8.1 UPGRADE An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8
• CVE-2025-60914 MEDIUM 4.6 UPGRADE Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to acc
• CVE-2025-56423 MEDIUM 5.3 UPGRADE An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a re
• CVE-2025-51536 CRITICAL 9.8 UPGRADE Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator pa
• CVE-2025-51535 CRITICAL 9.1 UPGRADE Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerabilit
• CVE-2025-51534 HIGH 8.1 UPGRADE A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows

FAQ

How do I fix openatlas vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openatlas being exploited right now?

None of the tracked openatlas CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openatlas CVE should I patch first?

CVE-2025-51536 currently ranks highest (61/100): Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator pa.

RSS feed for openatlas · ← Back to latest CVEs