Thecontrolgroup

Voyager

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-37214

Exploit
  • EPSS 0.3%
  • Veröffentlicht 11.02.2026 20:37:32
  • Zuletzt bearbeitet 12.02.2026 15:10:37

Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset path parameter. Attackers can exploit the path parameter in /admin/voyager-assets to read arbitrary files like...

5.7

CVE-2024-55415

Exploit
  • EPSS 30.39%
  • Veröffentlicht 30.01.2025 15:15:17
  • Zuletzt bearbeitet 23.05.2025 14:48:31

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

3.5

CVE-2024-55416

Exploit
  • EPSS 0.24%
  • Veröffentlicht 30.01.2025 15:15:17
  • Zuletzt bearbeitet 23.05.2025 16:31:48

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.

4.3

CVE-2024-55417

Exploit
  • EPSS 5.66%
  • Veröffentlicht 30.01.2025 15:15:17
  • Zuletzt bearbeitet 23.05.2025 16:24:05

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

9.8

CVE-2020-36070

  • EPSS 1.76%
  • Veröffentlicht 26.04.2023 20:15:09
  • Zuletzt bearbeitet 03.02.2025 17:15:11

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.

7.2

CVE-2019-17050

  • EPSS 0.56%
  • Veröffentlicht 30.09.2019 19:15:08
  • Zuletzt bearbeitet 21.11.2024 04:31:35

An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Co...