Description
Traccar 版本 5.8 - 6.0 仅在配置文件中设置了 <entrykey='web.override'>./override</entry>容易受到攻击。默认情况下，版本 6.1 - 6.8.1 易受攻击，因为默认情况下启用了Web 覆盖。
Traccar 本地文件包含（CVE-2025-61666）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-61666
https://github.com/traccar/traccar/security/advisories/GHSA-hprc-rph8-fj87
https://www.sentinelone.com/vulnerability-database/cve-2025-61666/
https://projectblack.io/blog/jetty-addpath-lfi/
https://blog.csdn.net/m0_50125527/article/details/153459607
https://notcve.org/view.php?id=CVE-2025-61666
https://www.gm7.org/archives/21777