DevDojo Voyager vulnerable to path traversal

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-55415 · ADVISORY
• thedevdojo/voyager · PACKAGE
• thedevdojo/voyager · WEB
• thedevdojo/voyager · WEB
• sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities · WEB
• sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities · Exploit

Mais vulnerabilidades de tcg/voyager

• CVE-2025-32931CRÍTICO 9.1DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands v…
• CVE-2024-55417MÉDIO 4.3DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /a…
• CVE-2024-55416BAIXO 3.5DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a…
• CVE-2020-36070CRÍTICO 9.8Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fi…