CVE-2025-56423

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 24, 2025

CISA due date

—

The record

An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messages

Affected packages

Ecosystem	Package	Introduced	Fixed