Description
Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS) web server.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Cityworks | Trimble / Cityworks | >= 0, < 15.8.9 | affected |
| Cityworks (with office companion) | Trimble / Cityworks (with office companion) | >= 0, < 23.10 | affected |