CVE-2019-5748

In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-01-09

Last modified

2024-08-04

Weaknesses

CWE-611

Affected products

• Server (Traccar)

References

• https://github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bf
• https://www.traccar.org/blog/