Traq

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Traq records in CISA KEV

No Traq vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Traq · all components

TI-2018-14750 CVE-2018-20779 · GHSA-fv98-qm4j-r34w

MEDIUM 46

Traq 3.7.1 allows SQL Injection via a tickets?search= URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01973 Published 2019-02-11 No fix listed CWE-89

TI-2018-14751 CVE-2018-20780 · GHSA-hw2h-825p-6rm2

MEDIUM 40

Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00804 Published 2019-02-11 No fix listed CWE-352