critical9.8
CVE-2019-13489
Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.
Impact
Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trape Project | Trape | through 2019-05-08 |