Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2018-25131

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Stored XSS via Config Upload

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attackers can upload a malicious HTML file to that executes arbitrary JavaScript in a user's browser session when viewed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Leica Geosystems AG GR10/GR25/GR30/GR50 GNSS

  • 4.30.063affected
  • 4.20.232affected
  • 4.11.606affected
  • 3.22.1818affected
  • 3.10.1633affected
  • 2.62.782affected
  • 1.00.395affected

References