CVE-2018-1000881

Affected product: Traccar Server (versions 4.0 and earlier). The vulnerability is CWE-94 (Code Injection) in ComputedAttributesHandler.java, leading to Remote Command Execution. Exploitation path: via a remote web application request by a self-registered user. Impact per sources: partial confiden...