CVE-2018-20779: Traq

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Traq 3.7.1 allows SQL Injection via a tickets?search= URI.

Affected products

• Traq Traq: version 3.7.1 only

Published 2019-02-11. Last modified 2026-06-17.