DevDojo Voyager Arbitrary File Write

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-55417 · ADVISORY
• thedevdojo/voyager · PACKAGE
• thedevdojo/voyager · WEB
• sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities · WEB
• sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities · Exploit

tcg/voyager のその他の脆弱性

• CVE-2025-32931緊急 9.1DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands v…
• CVE-2024-55416低 3.5DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a…
• CVE-2024-55415中 5.7DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
• CVE-2020-36070緊急 9.8Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fi…