Skip to the content.

SmarterTrack limited disclosure

12 Mar 2022 - Finn van der Knaap

On 27 October 2021 Wietse Boonstra found several vulnerabilities in the latest version of SmarterTrack. There were two XSS, an unauthenticated download and an upload / overwrite vulnerability.

Today we are releasing case DIVD-2021-00029 and are disclosing some of the details of the four CVEs.


Last modified: 20 Jun 2022 07:35