Skip to content
OpenAdvisories

Package · Packagist

tcg/voyager

5 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2024-55415 Scanner template EPSS 18%

    DevDojo Voyager vulnerable to path traversal

    DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

  • Medium 4.3
    CVE-2024-55417 Scanner template EPSS 16%

    DevDojo Voyager Arbitrary File Write

    DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.