CNNVD-202512-4299 Information

CNNVD ID

CNNVD-202512-4299

CVE-2018-25131

  • CNNVD Published: 2025-12-24

Description (Chinese)

Leica Geosystems GNSS是德国徕卡(Leica)公司的一系列测绘设备。 Leica Geosystems GNSS 4.30.063版本存在安全漏洞,该漏洞源于配置文件上传功能存在存储型跨站脚本,可能导致执行任意JavaScript代码。

Description (English)

Leica Geosystems GNSS is a series of mapping equipment for the German company Leica. There is a security loophole in the Leica Geosystems GNSS 4.30.063 version, which stems from the existence of a storage cross-site script for the configuration file upload, which may result in the implementation of any JavaScript code.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

徕卡

Published

2025-12-24

Last Modified

2026-02-24

References

https://www.exploit-db.com/exploits/46091 https://www.leica-geosystems.com https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5503.php

Share on: