CVE-2024-55416
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Jan 30, 2025
Updated: Feb 6, 2025
CWE ID 79
Summary
CVE-2024-55416 is a reflection XSS vulnerability affecting DevDojo Voyager up to version 1.8.0. Attackers can exploit this issue by crafting malicious links and tricking authenticated users into clicking on them. Successful exploitation allows the attacker to inject and execute arbitrary JavaScript code in the user's browser. This can lead to stolen session cookies, sensitive data disclosure, or further system compromise. Users are urged to update to the latest version of DevDojo Voyager to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Yardi Voyager
Affected Vendors
- Yardi Systems