CVE-2024-55417

Published: 2025-01-30T15:15Z

Last Modified: 2025-02-06T14:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt