VULNERABILITY INTELLIGENCE

CVE-2024-55417

CVSS score4.3 MEDIUM

EPSS probability14.12%

CISA KEVNot currently listed

Published2025-01-30

Last modified2026-06-17

Description

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.