DevDojo Voyager Compass Path Traversal

Successful exploitation can expose sensitive filesystem data and permit unauthorized deletion of files accessible to the Voyager application process. Deletion of application-critical files can disrupt application operation and cause denial of service. The available information characterizes exploitation as network-accessible and identifies remote unauthenticated exploitation; one conflicting CVSS v3 assessment lists low privileges and user interaction as requirements.

Remove or disable affected Voyager deployments where feasible. Restrict access to administrative functionality, particularly the Compass file-management interface, using network-layer controls, strong authentication, and least-privilege authorization. Run the application under a minimally privileged account and restrict filesystem permissions so the service cannot read or delete sensitive or critical files outside its required storage locations. Monitor for anomalous file-access and deletion activity.

No vendor security update or confirmed fixed Voyager version is available in the provided information. Administrators should monitor DevDojo Voyager's official maintenance channels for a security release and upgrade promptly when a validated fix is available. Until then, avoid deploying affected Voyager versions or migrate to an alternative maintained administration package.