allegra vulnerabilities

8 known vulnerabilities in allegra from Alltena. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Allegra: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-5581Nov 22, 2024AllegraEPSS 2.36%

  Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw ex

• 7.2 High severity

  Allegra: Deserialization of Untrusted Data

  CVE-2024-5580Nov 22, 2024AllegraEPSS 1.55%

  Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. T

• 7.2 High severity

  Allegra: Deserialization of Untrusted Data

  CVE-2024-5579Nov 22, 2024AllegraEPSS 1.55%

  Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability.

• 7.3 High severity

  Allegra: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-52333Nov 22, 2024AllegraEPSS 1.91%

  Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product impl

• 7.5 High severity

  Allegra: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-52332Nov 22, 2024AllegraEPSS 2.06%

  Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerabil

• 7.3 High severity

  Allegra: Improper Access Control

  CVE-2023-51644Nov 22, 2024AllegraEPSS 1.98%

  Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The s

• 9.8 Critical severity

  Allegra: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-51639Nov 22, 2024AllegraEPSS 2.49%

  Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The s

• 9.8 Critical severity

  Allegra: Use of Hard-coded Credentials

  CVE-2023-51638Nov 22, 2024AllegraEPSS 1.37%

  Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists