DevDojo Voyager vulnerable to reflected Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-55416 · ADVISORY
• thedevdojo/voyager · PACKAGE
• thedevdojo/voyager · WEB
• thedevdojo/voyager · WEB
• sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities · WEB
• sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities · Exploit

tcg/voyager のその他の脆弱性

• CVE-2025-32931緊急 9.1DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands v…
• CVE-2024-55417中 4.3DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /a…
• CVE-2024-55415中 5.7DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
• CVE-2020-36070緊急 9.8Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fi…