admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 09:12:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-1000881.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

877 B
Raw Blame History

CVE-2018-1000881

Description

Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web application request by a self-registered user. This vulnerability appears to have been fixed in 4.1 and later.

POC

Reference

Github

No PoCs found on GitHub currently.