Voyager

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-55417 MEDIUM POC THREAT Monitor

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 24.7%.

RCE File Upload Voyager

NVD GitHub

CVSS 3.1

4.3

EPSS

24.7%

CVE-2024-55416 LOW POC Monitor

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Voyager

NVD GitHub

CVSS 3.1

3.5

EPSS

1.3%

CVE-2024-55415 MEDIUM POC THREAT This Month

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 58.6%.

Path Traversal Voyager

NVD GitHub

CVSS 3.1

5.7

EPSS

58.6%

CVE-2024-55417

EPSS 25% CVSS 4.3

MEDIUM POC THREAT Monitor

RCE File Upload Voyager

NVD GitHub

CVE-2024-55416

EPSS 1% CVSS 3.5

LOW POC Monitor

XSS Voyager

NVD GitHub

CVE-2024-55415

EPSS 59% CVSS 5.7

MEDIUM POC THREAT This Month

Path Traversal Voyager

NVD GitHub