Description
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can trick logged-in users into executing unauthorized actions by crafting malicious web pages that submit requests to the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Leica Geosystems | Leica Geosystems GR10/GR25/GR30/GR50 GNSS | 4.30.063, 4.20.232, 4.11.606, 3.22.1818, 3.10.1633, 2.62.782, 1.00.395 | — |
References
- Zero Science Lab Vulnerability Advisory third-party-advisory
- Exploit Database Entry 46090 exploit
- Packet Storm Security Exploit File exploit
- IBM X-Force Vulnerability Exchange Entry vdb-entry
- Leica Geosystems Vendor Homepage product