CVE-2019-17050

HIGH

thecontrolgroup voyager Authorization Bypass Through User-Controlled Key

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2019-17050 has a selected CVSS score of 7.2 (high).

Description

An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 29, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

voyager

Browse thecontrolgroup / voyager
VulnCheckVersion data not supplied

References

2