CVE Feed

    Dashboard / CVE / CVE-2023-50729

    CVE-2023-50729

    Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root user. It is also more dangerous because it can write or overwrite files in arbitrary locations. Version 5.11 was published to fix this vulnerability.

    Published:Jan 15, 2024
    Last Modified:Jun 17, 2025
    EPS:Jan 15, 2024
    EPSS Score:0.0007
    CVSS Score:8.5

    Affected Products

    Vendor
    Traccar
    Product
    Traccar

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Related CVEs

    CVE-2026-48745 (CVSS 9.3) — Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-sou…
    CVE-2026-44314 (CVSS 5.3) — Traccar is an open source GPS tracking system. Prior to 6.13.0, DeviceResource.uploadImage authorizes the targ…
    CVE-2026-27694 (CVSS 5.4) — Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.…
    CVE-2026-27693 (CVSS 5.4) — Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.…
    CVE-2026-27644 (CVSS 6.5) — Traccar is an open source GPS tracking system. In versions between 6.11.1 and 6.13.0, the CSV export functiona…
    CVE-2026-25649 (CVSS 7.3) — Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which a…
    CVE-2026-25648 (CVSS 8.7) — Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authent…
    CVE-2026-23521 (CVSS 6.5) — Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which a…
    CVE-2025-68930 (CVSS 7.1) — Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSoc…
    CVE-2025-61666 (CVSS 8.7) — Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High