CVE-2019-17050

An issue was discovered in the Voyager package through 1.2.7 for Laravel

published September 30, 2019

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01219 · 68.4th percentile
Published
2019-09-30T18:51Z
EPSS history
Timeline
  • 30 SEP 18:51Z
    An issue was discovered in the Voyager package through 1.2.7 for Laravel
    cvelistv5