{"id":"CVE-2024-24809","summary":"Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type","details":"Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this vulnerability to upload files with the prefix `device.` under any folder. Attackers can use this vulnerability for phishing, cross-site scripting attacks, and potentially execute arbitrary commands on the server. Version 6.0 contains a patch for the issue.","aliases":["GHSA-vhrw-72f6-gwp5"],"modified":"2026-10-22T16:13:27.583007179Z","published":"2024-04-10T14:48:13.370Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-27","CWE-434"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24809.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24809.json"},{"type":"ADVISORY","url":"https://github.com/traccar/traccar/security/advisories/GHSA-vhrw-72f6-gwp5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24809"},{"type":"FIX","url":"https://github.com/traccar/traccar/commit/b099b298f90074c825ba68ce73532933c7b9d901"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/traccar/traccar","events":[{"introduced":"0"},{"fixed":"9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"fixed":"b099b298f90074c825ba68ce73532933c7b9d901"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StringRangeExpression","range":[{"introduced":"0"},{"fixed":"6.0"}]},{"range":[{"fixed":"b099b298f90074c825ba68ce73532933c7b9d901"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["v5.12","v5.11","v5.10","v5.9","v5.8","v5.7","v5.6","v5.5","v5.4","v5.3","v5.2","v5.1","v5.0","v4.15","v4.14","v4.13","v4.12","v4.11","v4.10","v4.9","v4.8","v4.7","v4.6","v4.5","v4.4","v4.3","v4.2","v4.1","v4.0","v3.17","v3.16","v3.15","v3.14","v3.13","v3.12","v3.11","v3.10","v3.9","v3.8","v3.7","v3.6","v3.5","v3.4","v3.2","v3.1","v3.0","v2.12","v2.11","v2.10","v2.9","v2.8","v2.7","v2.6","v2.5","v2.4","v2.3","v2.2","v2.1","v2.0"],"database_specific":{"vanir_signatures_modified":"2026-10-22T16:13:27Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-24809.json","vanir_signatures":[{"target":{"file":"src/main/java/org/traccar/handler/GeocoderHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"length":853,"function_hash":"302899966980341602313320404798293554352"},"id":"CVE-2024-24809-015dd8ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"target":{"file":"src/main/java/org/traccar/handler/CopyAttributesHandler.java"},"deprecated":false,"digest":{"line_hashes":["257701667563535518183675232221230175332","143986437376267761277340750724966727419","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-045b5d0d","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"deprecated":false,"digest":{"function_hash":"119924858553851800941932293751134641673","length":101},"id":"CVE-2024-24809-0568c586","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeocoderHandler.java","function":"onSuccess"}},{"id":"CVE-2024-24809-05ee5d51","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/ComputedAttributesHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"106251742999302882458643033751154018398","length":1566}},{"target":{"file":"src/main/java/org/traccar/handler/OutdatedHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"36522629426061964978330561302824246516","length":678},"id":"CVE-2024-24809-06a9b55c","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"digest":{"function_hash":"144997570182423610120397936746969244077","length":332},"id":"CVE-2024-24809-08d7c539","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/DatabaseHandler.java","function":"handlePosition"},"deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["107346085179560962518853341239724380922","143986437376267761277340750724966727419","225794574244789362222741000602937119305"]},"id":"CVE-2024-24809-13b9fbe1","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/OutdatedHandler.java"}},{"target":{"file":"src/main/java/org/traccar/handler/TimeHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"97071901569710500759677240394712141488","length":321},"id":"CVE-2024-24809-19aded68","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"deprecated":false,"digest":{"line_hashes":["1358027058571831970395966882442948508","162457192824301293518911526979933077405","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-1b368c27","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/HemisphereHandler.java"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["133626356385065129953959553036556944380","115783532963337635336016872023809835642","125114911045103430718700815384218712276","89071199498320417923059153666380132176"]},"id":"CVE-2024-24809-1b74f0c4","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/BasePositionHandler.java"}},{"id":"CVE-2024-24809-1eabba59","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"handlePosition","file":"src/main/java/org/traccar/handler/CopyAttributesHandler.java"},"deprecated":false,"digest":{"length":519,"function_hash":"29266831330326043115001462293662059765"}},{"digest":{"line_hashes":["50111225134795845774056340599125439804","211410891981388231392730364977725655375","15656916478659402873679892558342370430","13938603921629642748533933878593015331","88323317093503134561997500479999626485","52940009983303886419819481721800030091","301782008229598365745531768671951185437","322964995395205360332448833913537027448","77442942262592108160037697699728411925","185703398680159738054542471432929321176","208503420434015667624101142882485683925","191790408536374981186023119039999941656","172229077161099023636876928958296017828","236762382093078446597555970717764201443","223031641370455966217469525633561466904","197498948856870509088260643839811259134","241809839437801947350434044625663825865","40749173469780441758153254874551829954","129326099401974981134510209789923890394","35040431374018795187869483530714950244","31130135695068574148666199558340210468"],"threshold":0.9},"id":"CVE-2024-24809-214df8dd","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeocoderHandler.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"5183777822042820363893887054284774661","length":145},"id":"CVE-2024-24809-22164e82","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeolocationHandler.java","function":"onSuccess"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/EngineHoursHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"318586638516570562588507655422334155506","length":510},"id":"CVE-2024-24809-244c5e43"},{"deprecated":false,"digest":{"line_hashes":["63880876725291322550725646612718631311","10945763000732571895696240122708244122","138637679320500852312777196414904291179","275466566804817745789837911522907191403","273649048516882096044300436665691392530","85657495602262326274007632857078340580","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-25efc253","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/PostProcessHandler.java"}},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeocoderHandler.java","function":"onFailure"},"deprecated":false,"digest":{"function_hash":"308112482293697400578977228539143538667","length":120},"id":"CVE-2024-24809-26841245","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2024-24809-2a0255ae","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeofenceHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"length":208,"function_hash":"26131540916823369739291448848984982101"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["77772278698286928625443945987580102544","26122056412641110935987325578147730849","225794574244789362222741000602937119305"]},"id":"CVE-2024-24809-376717e4","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/MotionHandler.java"}},{"target":{"file":"src/main/java/org/traccar/handler/SpeedLimitHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"length":473,"function_hash":"13132583677828712625372133435965932309"},"id":"CVE-2024-24809-4720b31a","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/ComputedAttributesHandler.java"},"deprecated":false,"digest":{"line_hashes":["257701667563535518183675232221230175332","143986437376267761277340750724966727419","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-5449c368","signature_type":"Line"},{"id":"CVE-2024-24809-6801315b","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"handlePosition","file":"src/main/java/org/traccar/handler/PositionForwardingHandler.java"},"deprecated":false,"digest":{"length":293,"function_hash":"73429451433440253611112650743303596868"}},{"id":"CVE-2024-24809-680f18b8","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/EngineHoursHandler.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["257701667563535518183675232221230175332","143986437376267761277340750724966727419","225794574244789362222741000602937119305"]}},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/DistanceHandler.java"},"deprecated":false,"digest":{"line_hashes":["208589671812996199409053559985340458540","196875779370283675557685642047166966965","51675824780963558120915010441417330854"],"threshold":0.9},"id":"CVE-2024-24809-6b37c6ad","signature_type":"Line","signature_version":"v1"},{"digest":{"length":318,"function_hash":"168241495844942162086937994041225305887"},"id":"CVE-2024-24809-79fe0dd9","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"handlePosition","file":"src/main/java/org/traccar/handler/MotionHandler.java"},"deprecated":false},{"target":{"file":"src/main/java/org/traccar/handler/TimeHandler.java"},"deprecated":false,"digest":{"line_hashes":["45307125448750538996414705016964559782","143986437376267761277340750724966727419","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-8db3f304","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/SpeedLimitHandler.java","function":"onFailure"},"deprecated":false,"digest":{"length":131,"function_hash":"33558583185578389560041799755225099255"},"id":"CVE-2024-24809-955fe673","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeolocationHandler.java"},"deprecated":false,"digest":{"line_hashes":["61433318705676468101256642195384438060","270268412870729484305525289667495215983","96885425053098139263037218592957897108","322964995395205360332448833913537027448","110237226273113181631842670672956718068","124433002413886748583893221916483847191","231045452897065801072156904550315311618","191790408536374981186023119039999941656","10444249462083129934529784630831127740","92934739721663866952355659958966104148","174123544199858726348051289369907330150","297651302328613643147186421643286235221","241809839437801947350434044625663825865","40749173469780441758153254874551829954","129326099401974981134510209789923890394","35040431374018795187869483530714950244","314037736189366393849874482379792553602"],"threshold":0.9},"id":"CVE-2024-24809-957e08be","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/traccar/traccar/commit/b099b298f90074c825ba68ce73532933c7b9d901","target":{"file":"src/main/java/org/traccar/api/resource/DeviceResource.java"},"deprecated":false,"digest":{"line_hashes":["74808720426878502994212136747045830959","261953669297654708218436383518940420539","66005620080790843754421542260666171314","321479212436890351224233572587422893410","298117560143114341514011213004102954082","313991898618218427622514602455973928479","285915247893142268095931853393600023248","198992772485994984023518079832778261625","315087012082449764599321795110064041881","21375002979317948735087444390419224504","127850333543905484246164641097271529676","11863412352109266155814878663627143376"],"threshold":0.9},"id":"CVE-2024-24809-97f88190","signature_type":"Line"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeofenceHandler.java"},"deprecated":false,"digest":{"line_hashes":["324618945742577798200671529842622037530","84169048418853082769159789606656226861","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-9f45b666","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/main/java/org/traccar/handler/DatabaseHandler.java"},"deprecated":false,"digest":{"line_hashes":["287933278603185593112874765012193025423","241225601047973163149144665227905342168","225794574244789362222741000602937119305"],"threshold":0.9},"id":"CVE-2024-24809-9f45c111","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/SpeedLimitHandler.java","function":"onSuccess"},"deprecated":false,"digest":{"length":130,"function_hash":"117779909771537629392829664196390922640"},"id":"CVE-2024-24809-a7bd93d5","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/SpeedLimitHandler.java"},"deprecated":false,"digest":{"line_hashes":["28268053196852106038900926433539778971","6822161070250628144422812528804339192","57063429155188806807907240819512280655","191790408536374981186023119039999941656","185786571732876674035206727385201887689","318636034998117105522299406395769882457","301463894566902274707029667042547090340","159163830724440448294928720174478597174","126800305797342163730732288259715061497"],"threshold":0.9},"id":"CVE-2024-24809-b434a7bb","signature_type":"Line"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/ProcessingHandler.java"},"deprecated":false,"digest":{"line_hashes":["60005698980472994391796624612974552999","285849473071406253032875119180667694640","30743524842493974854229137611875201394","247450431414390203853430371576957829013","108553806125621200468296022339504060774","323456682563960242896582176938680738288","64715923544396372269170946794830778544","131003166002628937010028551755107947927","249915827903519313013899718360547277545","290131300845710976210991788727619513013","145992685738075948921115949164929029825","234076767732234927059141084570454213147","115061339894305820062132183994419952240","122244337658168396634993057330090758294","45905938329264727978128216464205924079","41138849576291629866093542968745244321","331299617943440961821416729526397192736","42626058174098199303079050871910671456","119328594984976666062526100410303568150","173589484720547793517237298804404517515","177474750651022209637177526208535818298","200747453489643827088115590939449311056","263944024633110622332990614443458214498","58159805881065071327692182708095880244","310707243861698331437742482784532623025","26256656811361974722179235096767775776","304721539631755076665133995372071239762","106676481057026506668059954367772841874","308444992014456452526659278840942282668","244125084856819352952595829882912148068"],"threshold":0.9},"id":"CVE-2024-24809-b7b04004","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2024-24809-bce65cd9","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"onFailure","file":"src/main/java/org/traccar/handler/GeolocationHandler.java"},"deprecated":false,"digest":{"length":129,"function_hash":"328997088437744553526943514146527305947"}},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/DistanceHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"49791914405810184688674431920574359914","length":1056},"id":"CVE-2024-24809-c1f430e1","signature_type":"Function","signature_version":"v1"},{"target":{"function":"processEventHandlers","file":"src/main/java/org/traccar/ProcessingHandler.java"},"deprecated":false,"digest":{"function_hash":"96798274792421581498754254426923282971","length":231},"id":"CVE-2024-24809-c49f9bf0","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"digest":{"function_hash":"150401002192962657578758704582263211371","length":1063},"id":"CVE-2024-24809-c5e6f68b","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/GeolocationHandler.java","function":"handlePosition"},"deprecated":false},{"target":{"file":"src/main/java/org/traccar/handler/PositionForwardingHandler.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["161529334035985038274162887407000536680","228599421985767257045035743974486130989","225794574244789362222741000602937119305"]},"id":"CVE-2024-24809-c6290fd7","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46"},{"signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/FilterHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"328666150851856325247982685487615647841","length":144},"id":"CVE-2024-24809-caf0ff57","signature_type":"Function"},{"digest":{"function_hash":"31925386566515299517648527428520574511","length":453},"id":"CVE-2024-24809-cbc3681d","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"processPositionHandlers","file":"src/main/java/org/traccar/ProcessingHandler.java"},"deprecated":false},{"id":"CVE-2024-24809-e389e593","signature_type":"Line","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/FilterHandler.java"},"deprecated":false,"digest":{"line_hashes":["35682071629699823479260713177690706564","285575624349044226023593220300644263790","194353742103433453681044103721125482424","31867183483732246952608368889687560421","68158306738362401502017979257019275205","35040431374018795187869483530714950244","31130135695068574148666199558340210468"],"threshold":0.9}},{"id":"CVE-2024-24809-eb1a9f6d","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"handlePosition","file":"src/main/java/org/traccar/handler/HemisphereHandler.java"},"deprecated":false,"digest":{"function_hash":"8739902359747658206132063296793256115","length":303}},{"id":"CVE-2024-24809-f46ae8c9","signature_type":"Function","signature_version":"v1","source":"https://github.com/traccar/traccar/commit/b099b298f90074c825ba68ce73532933c7b9d901","target":{"file":"src/main/java/org/traccar/api/resource/DeviceResource.java","function":"imageExtension"},"deprecated":false,"digest":{"function_hash":"38772422499441037556732003494462412170","length":297}},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/handler/PostProcessHandler.java","function":"handlePosition"},"deprecated":false,"digest":{"function_hash":"215715379878148501002623019022952577355","length":595},"id":"CVE-2024-24809-f5c842d9","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"file":"src/main/java/org/traccar/ProcessingHandler.java","function":"finishedProcessing"},"deprecated":false,"digest":{"length":397,"function_hash":"255670310556623537825369233644311275941"},"id":"CVE-2024-24809-f8c5a820","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/traccar/traccar/commit/9a285e59e580994dc9c3f80935f766f3dafdcd46","target":{"function":"processed","file":"src/main/java/org/traccar/ProcessingHandler.java"},"deprecated":false,"digest":{"function_hash":"146566646037494617224968180072976145882","length":219},"id":"CVE-2024-24809-fd10f244","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L"}]}