📦 Openatlas
by Craws
🔍 What is Openatlas?
Description coming soon...
🛡️ Security Overview
Click on a severity to filter vulnerabilities
⚠️ Known Vulnerabilities
OpenAtlas v8.11.0 contains an unrestricted SQL console in the admin UI that allows authenticated administrators to execute arbitrary SQL queries. This vulnerability enables complete database manipulat...
OpenAtlas v8.11.0 contains a hardcoded administrator password, allowing attackers to gain full administrative access to the system. This affects all deployments using the vulnerable version, potential...
This vulnerability allows attackers to perform path traversal attacks via the size query parameter in Openatlas's /views/file.py endpoint. Attackers can potentially read arbitrary files on the server,...
This stored cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute OpenAtlas allows attackers to inject malicious scripts into the Name field, which are then executed when other...
A reflected cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute Openatlas allows attackers to inject malicious scripts via the color parameter in the /overview/network/ endpo...
This vulnerability allows attackers to bypass access controls in Austrian Archaeological Institute Openatlas by sending crafted GET requests to the /display_logo endpoint, potentially exposing sensiti...
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas allows attackers to inject malicious scripts via the charge param...
This vulnerability in OpenAtlas v8.12.0 allows remote attackers to enumerate valid usernames through login error messages. Attackers can determine which accounts exist in the system by analyzing diffe...
A stored Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 allows attackers to inject malicious scripts via the '/insert/event' endpoint's 'name' parameter. This could enable session hijack...
A stored Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 allows remote attackers to inject malicious scripts via the 'name' parameter in POST requests to '/insert/source'. This could enab...
A Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 allows remote attackers to inject malicious scripts via the 'name' parameter in POST requests to '/insert/edition'. This could enable ses...
A stored Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 allows remote attackers to inject malicious scripts via the 'creator' and 'license_holder' parameters in POST requests to '/insert...