thecontrolgroup records
5 published records for vendor thecontrolgroup.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-281 Improper Preservation of Permissions1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2020-36070No exploit | Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fithecontrolgroup · voyager · CWE-281 | Critical9.8 | — | 1.1% | Apr 26, 2023 |
28Monitor | CVE-2019-17050No exploit | An issue was discovered in the Voyager package through 1.2.7 for Laravel.thecontrolgroup · voyager · CWE-639 | High7.2 | — | 1.2% | Sep 30, 2019 |
27Monitor | CVE-2024-55415Proof of concept | DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.thecontrolgroup · voyager · CWE-22 | Medium5.7 | — | 15.6% | Jan 30, 2025 |
21Monitor | CVE-2024-55417Proof of concept | DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /athecontrolgroup · voyager · CWE-434 | Medium4.3 | — | 14.1% | Jan 30, 2025 |
20Monitor | CVE-2024-55416Proof of concept | DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.thecontrolgroup · voyager · CWE-79 | Low3.5 | — | 20.3% | Jan 30, 2025 |
- CVE-2020-3607039Monitor
Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fi
CriticalCVSS 9.8No exploitEPSS 1%thecontrolgroup · voyagerApr 26, 2023
- CVE-2019-1705028Monitor
An issue was discovered in the Voyager package through 1.2.7 for Laravel.
HighCVSS 7.2No exploitEPSS 1%thecontrolgroup · voyagerSep 30, 2019
- CVE-2024-5541527Monitor
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
MediumCVSS 5.7Proof of conceptEPSS 16%thecontrolgroup · voyagerJan 30, 2025
- CVE-2024-5541721Monitor
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /a
MediumCVSS 4.3Proof of conceptEPSS 14%thecontrolgroup · voyagerJan 30, 2025
- CVE-2024-5541620Monitor
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.
LowCVSS 3.5Proof of conceptEPSS 20%thecontrolgroup · voyagerJan 30, 2025