未評価
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0...
CVE-2025-60916
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the charge parameter.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web sec4you-pentest.com
- web sec4you-pentest.com