CVE-2024-55415

Name of the Vulnerable Software and Affected Versions DevDojo Voyager versions 1.8.0 and earlier

Description The issue allows an attacker to gain access to sensitive information through path traversal at the "/admin/compass" API endpoint. This vulnerability is related to errors in handling relative paths to directories, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For DevDojo Voyager versions 1.8.0 and earlier, consider restricting access to the "/admin/compass" endpoint until a patch is available. As a temporary workaround, limit the exposure of sensitive information that could be accessed through this endpoint.