CVE-2024-55416

CVSS 3.1 Score 3.5 of 10 (low)

Details

Published Jan 30, 2025
Updated: Feb 6, 2025
CWE ID 79

Summary

CVE-2024-55416 is a reflection XSS vulnerability affecting DevDojo Voyager up to version 1.8.0. Attackers can exploit this issue by crafting malicious links and tricking authenticated users into clicking on them. Successful exploitation allows the attacker to inject and execute arbitrary JavaScript code in the user's browser. This can lead to stolen session cookies, sensitive data disclosure, or further system compromise. Users are urged to update to the latest version of DevDojo Voyager to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Yardi Voyager

Affected Vendors

  • Yardi Systems