writeups.xyz / Traccar 5 Remote Code Execution Vulnerabilities

Submitter : c2a

Date: 23 August 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Unrestricted File Upload
• Path Traversal
• Security Code Review

Programs :

• Traccar

Authors :

• Naveen Sunkavally

Link :
https://www.horizon3.ai/attack-research/disclosures/traccar-5-remote-code-execution-vulnerabilities/