CVE-2018-1000881

Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web application request by a...

CVE-2018-1000881

Affected product: Traccar Server (versions 4.0 and earlier). The vulnerability is CWE-94 (Code Injection) in ComputedAttributesHandler.java, leading to Remote Command Execution. Exploitation path: via a remote web application request by a self-registered user. Impact per sources: partial confiden...