← Database

CVE-2024-55417

MEDIUM CVSS: 4.3 Published: 2025-01-30 Modified: 2026-06-17

Description

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.

Affected Platforms

Thecontrolgroup Voyager

Weakness Type

CWE-434

References