← All advisories

Critical severity9.8NVD Advisory· Published Jul 10, 2019· Updated Jun 17, 2026

CVE-2019-13489

CVE-2019-13489

Description

Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.

Affected products

2

Trape/Trapedescription
Trape/trapellm-create
Range: <=2019-05-08

Patches

Vulnerability mechanics

References

1

github.com/jofpin/trape/issues/168nvdVendor Advisory

News mentions

0

No linked articles in our index yet.