Traccar

Traccar

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2024-31214

Exploit
  • EPSS 17.63%
  • Veröffentlicht 10.04.2024 18:15:07
  • Zuletzt bearbeitet 09.01.2025 16:14:43

Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded through the device image upload API. Attackers have full control over the file contents, full control over the directory where the f...

8.5

CVE-2024-24809

  • EPSS 54.41%
  • Veröffentlicht 10.04.2024 15:16:04
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permission...

9.8

CVE-2023-50729

  • EPSS 0.6%
  • Veröffentlicht 15.01.2024 16:15:11
  • Zuletzt bearbeitet 21.11.2024 08:37:13

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Trac...

6.3

CVE-2021-21292

  • EPSS 0.39%
  • Veröffentlicht 02.02.2021 20:15:12
  • Zuletzt bearbeitet 21.11.2024 05:47:57

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path ...

6.5

CVE-2020-5246

  • EPSS 0.85%
  • Veröffentlicht 14.07.2020 21:15:10
  • Zuletzt bearbeitet 21.11.2024 05:33:45

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin p...