CVE-2019-5748

2019-01-0917:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.8%

JSON

In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.

CPENameOperatorVersion
traccareq2.0
traccareq3.12
traccareq3.6
traccareq3.11
traccareq3.10
traccareq3.16
traccareq3.2
traccareq3.0
traccareq2.4
traccareq3.8

Name	Operator	Version
traccar	eq	2.0
traccar	eq	3.12
traccar	eq	3.6
traccar	eq	3.11
traccar	eq	3.10
traccar	eq	3.16
traccar	eq	3.2
traccar	eq	3.0
traccar	eq	2.4
traccar	eq	3.8

Rows per page:

1-10 of 331

References

github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bf

www.traccar.org/blog/