Thecontrolgroup Voyager
5 CVEs affecting Thecontrolgroup Voyager. Latest disclosed: 2025-01-30. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36070 | Critical | 9.8 | 2023-04-26 | Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media com… |
CVE-2019-17050 | High | 7.2 | 2019-09-30 | An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary fil… |
CVE-2024-55415 | Medium | 5.7 | 2025-01-30 | DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. |
CVE-2024-55417 | Medium | 4.3 | 2025-01-30 | DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload… |
CVE-2024-55416 | Low | 3.5 | 2025-01-30 | DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Ja… |