Voyager

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-55417 PHP MEDIUM POC THREAT This Month

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 24.7%.

RCE File Upload Voyager

NVD GitHub

CVSS 3.1

4.3

EPSS

24.7%

CVE-2024-55416 PHP LOW POC Monitor

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Voyager

NVD GitHub

CVSS 3.1

3.5

EPSS

1.3%

CVE-2024-55415 PHP MEDIUM POC THREAT This Month

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 58.6%.

Path Traversal Voyager

NVD GitHub

CVSS 3.1

5.7

EPSS

58.6%

Threat

4.4

CVE-2024-55417 PHP

EPSS 25% CVSS 4.3

MEDIUM POC THREAT This Month

RCE File Upload Voyager

NVD GitHub

CVE-2024-55416 PHP

EPSS 1% CVSS 3.5

LOW POC Monitor

XSS Voyager

NVD GitHub

CVE-2024-55415 PHP

EPSS 59% 4.4 CVSS 5.7

MEDIUM POC THREAT This Month

Path Traversal Voyager

NVD GitHub