CVE-2024-55415

PoC —

CVSS 3.1

5.7 medium

EPSS

16%p97

Published

Jan 30, 2025 (Jan 30, 2025)

Modified

Jun 17, 2026

Description

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

Vendors: thecontrolgroup
Products: voyager
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (15.5%)

In the news3 stories

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [3 February]

The Hacker NewsFeb 4, 11:56 UTC · Feb 4, 2025Exploit / PoC in the wildCVE-2025-24085 CVE-2024-41710 CVE-2025-0626+30 CVEs

60

PHP package Voyager flaws expose to one

Security AffairsJan 30, 12:21 UTC · Jan 30, 2025Exploit / PoC CVE-2024-55417 CVE-2024-55416 CVE-2024-554151

60

Unpatched PHP Voyager Flaws Leave Servers Open to One

The Hacker NewsJan 30, 07:21 UTC · Jan 30, 2025Vulnerability CVE-2024-55417 CVE-2024-55416 CVE-2024-55415

60