CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-04-26

Last modified

2025-02-03

Weaknesses

CWE-281

Affected products

• Voyager (Thecontrolgroup)

References

• https://github.com/the-control-group/voyager/