CVE-2024-55416 PoC — Voyager 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55416.yaml

Associated Vulnerability

Title:Voyager 安全漏洞 (CVE-2024-55416)
Description:Voyager是David Borland个人开发者的一个应用程序。 Voyager 1.8.0及之前版本存在安全漏洞，该漏洞源于容易受到通过/admin/compass进行的反射型跨站脚本(XSS)攻击。

Description

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.

File Snapshot


 id: CVE-2024-55416

info:
  name: DevDojo Voyager <=1.8.0 - Cross-Site Scripting
  author: iamnoooob

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!