DevDojo Voyager Arbitrary Code Execution Vulnerability via Bypassed File Type Verification

A vulnerability in DevDojo Voyager through version 1.8.0 allows authenticated users to bypass file type verification when uploading files through the '/admin/media/upload' endpoint. This flaw can be exploited to upload web shells, leading to arbitrary code execution on the server.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server, with the executed code running in the context of the user who uploaded the file.

Reproduction

To reproduce this vulnerability, an authenticated user must upload a file through the '/admin/media/upload' endpoint. The upload process involves bypassing the application's MIME type verification, which can be achieved by manipulating the file's content to be recognized as an allowed type, such as an image or video. Once the file is uploaded, it can be executed as a PHP script, resulting in arbitrary code execution on the server.