exploit/linux/http/traccar_rce_upload

weaponized

Traccar v5 Remote Code Execution (CVE-2024-31214 and CVE-2024-24809)

view exploit source metasploittype exploitpublished 2024-08-23catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-31214US	critical9.6	17.6% (97th)	Exploit	2024-04-10
Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded through the device image upload API. Attackers have full contr…
CVE-2024-24809US	—	54.4% (99th)	Exploit	2024-04-10
Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows r…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.