Edgewall maintains a small portfolio centered on project-management and analytics tools such as Trac and FireStats, with a durable exposure pattern around web-application input handling and access control. The recurring weakness classes—SQL injection, open redirect, and improper default permissions—reflect common risks in database-driven web applications and highlight the importance of input validation and secure configuration in self-hosted collaboration platforms. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Edgewall over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-5108HIGH Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without havi | Nov 13, 2019 | 7.5 | 23 | NO | NO |
CVE-2009-2144HIGH SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | Jun 22, 2009 | 7.5 | 21 | NO | NO |
CVE-2009-4405HIGH Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate for | Dec 23, 2009 | 7.5 | 20 | NO | NO |
CVE-2008-2951MEDIUM Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in th | Jul 27, 2008 | 6.1 | 17 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Edgewall.
Media articles that mention a CVE ID that affects a product developed by Edgewall — matched by CVE ID, not by vendor name.