Beveiligingsadvies

CVE-2018-25131

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-24 19:27:44
Laatst bijgewerkt 2025-12-24 20:27:01
Toegewezen door VulnCheck
CVSS-score 7.2
Status PUBLISHED

Beschrijving

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attackers can upload a malicious HTML file to that executes arbitrary JavaScript in a user's browser session when viewed.