← All advisories

Critical severity9.8OSV Advisory· Published Jan 9, 2019· Updated Jun 17, 2026

CVE-2019-5748

CVE-2019-5748

Description

In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Traccar/TraccarOSV2 versions
v2.0, v2.1, v2.10, …+ 1 more
- (no CPE)range: v2.0, v2.1, v2.10, …
- (no CPE)range: =4.2
Traccar/Server
cpe:2.3:a:traccar:server:4.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bfnvdPatchThird Party Advisory
www.traccar.org/blog/nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.