Description
In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.
Remediation
References
https://github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bf
https://www.traccar.org/blog/
Related Vulnerabilities
CVE-2020-25020 Vulnerability in maven package net.sf.mpxj:mpxj
CVE-2022-31160 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery-ui
CVE-2011-1475 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2019-25028 Vulnerability in maven package com.vaadin:vaadin-server
CVE-2021-41182 Vulnerability in maven package org.webjars:jquery-ui