Vulnerabilities

TI-2024-36835 CVE-2024-55417 · GHSA-35p2-5vrh-m3p6

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type…

LOW 38

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.15884 Published 2025-01-30 No fix listed CWE-434

TI-2024-36834 CVE-2024-55416 · GHSA-mm49-4f2g-c3wf

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.

MEDIUM 50

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.2005 Published 2025-01-30 No fix listed CWE-79

TI-2024-36833 CVE-2024-55415 · GHSA-j63m-2vr6-fv7m

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

MEDIUM 43

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.17632 Published 2025-01-30 No fix listed CWE-22

TI-2020-18437 CVE-2020-36070 · GHSA-2x3r-7jgm-gh8x

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote…

MEDIUM 51

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01083 Published 2023-04-26 No fix listed CWE-281

TI-2019-12718 CVE-2019-17050 · GHSA-9v7c-rj74-pc33

An issue was discovered in the Voyager package through 1.2.7 for Laravel.

LOW 34

An issue was discovered in the Voyager package through 1.2.7 for Laravel.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01219 Published 2019-09-30 No fix listed CWE-639

Vulnerabilities

Filters

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type…

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote…

An issue was discovered in the Voyager package through 1.2.7 for Laravel.