CVE-2020-37214
HIGHVoyager 1.3.0 - Path Traversal via Asset Path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37214. PoCs published by NgoAnhDuc.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Voyager 1.3.0 and below, allowing unauthorized access to sensitive files like /etc/passwd or Laravel's .env file. The vulnerability arises from insufficient sanitization of the 'path' parameter in the assets function.
Description
Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset path parameter. Attackers can exploit the path parameter in /admin/voyager-assets to read arbitrary files like /etc/passwd and .env configuration files.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Voyager 1.3.0 and below, allowing unauthorized access to sensitive files like /etc/passwd or Laravel's .env file. The vulnerability arises from insufficient sanitization of the 'path' parameter in the assets function.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N