In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.

Published Jan 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre