CVE-2019-17050
Publicada el · Actualizada el
25Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Attendepss 1.2%
de la publicación al arma
Publicada en NVD30 sept
VulnCheck+2038d
probabilidad de explotación
1.2%top 32% de las CVE
explotación observada
síVulnCheck
An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.
Productos afectados
n/a · n/a