CVE-2024-55415

Description

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

How to fix CVE-2024-55415

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Packagist/tcg/voyager—no fix listed

Is CVE-2024-55415 being exploited?

Moderate — EPSS is 14.6%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, <= 1.8.0

CVSS scores

References (5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-55415
• PATCHgithub.com/thedevdojo/voyager
• WEBgithub.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L213
• WEBgithub.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L44