PatchTheCVEvoyager vulnerabilities and fixes
Recent CVEs affecting voyager, with upgrade or downgrade steps. 3 tracked.
voyager has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-01-30. Highest priority: CVE-2024-55415 (score 49/100).
- CVE-2024-55417 MEDIUM 4.3 UPGRADE DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authentica
- CVE-2024-55416 LOW 3.5 UPGRADE DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass
- CVE-2024-55415 MEDIUM 5.7 UPGRADE DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
FAQ
How do I fix voyager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is voyager being exploited right now?
None of the tracked voyager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which voyager CVE should I patch first?
CVE-2024-55415 currently ranks highest (49/100): DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass..