Skip to content
NewA calmer, faster ZeroHour

PHP package Voyager flaws expose to one

Security Affairsby @securityaffairs ()2 min read3 · 1 read
Analyze CVE-2024-55417 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-55415
+2 related CVEs
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass
5.7
group max
16%PoC

From the original article

2 min read at securityaffairs.com

The open-source PHP package Voyager is affected by three vulnerabilities that could be exploited to achieve one-click remote code execution on affected instances. Voyager is a popular open-source PHP package for managing Laravel applications, offering an admin interface, BREAD operations, media, and user management.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.