Arbitrary Code Execution

2023-05-0408:32:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary code execution

improper input sanitization

php file

media component

software

0.004 Low

EPSS

Percentile

73.7%

JSON

tcg/voyager is vulnerable to Arbitrary Code Execution. The vulnerability exists due to improper input sanitization which allows an attacker to execute arbitrary codes via a crafted .php file to the media component.

CPENameOperatorVersion
tcg/voyagerlev1.4.0
tcg/voyagerlev1.4.0

CPE	Name	Operator	Version
	tcg/voyager	le	v1.4.0
	tcg/voyager	le	v1.4.0

References

github.com/advisories/GHSA-2x3r-7jgm-gh8x

github.com/the-control-group/voyager/

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for VERACODE:40402