Description
In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.
Remediation
References
https://github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bf
https://www.traccar.org/blog/
Related Vulnerabilities
CVE-2020-13956 Vulnerability in maven package org.apache.httpcomponents:httpclient
CVE-2023-40349 Vulnerability in maven package org.jenkins-ci.plugins:gogs-webhook
CVE-2021-29489 Vulnerability in npm package highcharts
CVE-2023-26104 Vulnerability in npm package lite-web-server
CVE-2023-28444 Vulnerability in npm package angular-server-side-configuration