alltena vulnerabilities

Products

• allegra 21

Latest alltena CVEs

Newest publication first

1. CVE-2025-6216 Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

   Published 2025-06-21

   Critical·CVSS 9.8 EPSS 47.8%

   Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists wi...

2. CVE-2025-3485 Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability

   Published 2025-06-06

   High·CVSS 8.8 EPSS 1.9%

   Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within...

3. CVE-2025-3486 Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability

   Published 2025-05-22

   High·CVSS 8.8 EPSS 1.6%

   Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within t...

4. CVE-2024-5581 Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

   Published 2024-11-22

   High·CVSS 7.2 EPSS 2.4%

   Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the unzi...

5. CVE-2024-5580 Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

   Published 2024-11-22

   High·CVSS 7.2 EPSS 1.6%

   Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exi...

6. CVE-2024-5579 Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

   Published 2024-11-22

   High·CVSS 7.2 EPSS 1.6%

   Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw e...

7. CVE-2024-30372 Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability

   Published 2024-11-22

   Medium·CVSS 6.3 EPSS 1.2%

   Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists wi...

8. CVE-2023-52334 Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability

   Published 2024-11-22

   Medium·CVSS 6.5 EPSS 1.9%

   Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product...

9. CVE-2023-52333 Allegra saveFile Directory Traversal Remote Code Execution Vulnerability

   Published 2024-11-22

   High·CVSS 7.3 EPSS 1.9%

   Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registratio...

10. CVE-2023-52332 Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability

    Published 2024-11-22

    High·CVSS 7.5 EPSS 2.1%

    Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific fl...

11. CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

    Published 2024-11-22

    Medium·CVSS 6.5 EPSS 1.9%

    Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the produ...

12. CVE-2023-51647 Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 4.7 EPSS 2.2%

    Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authenticatio...

13. CVE-2023-51646 Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 4.7 EPSS 1.8%

    Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authenticat...

14. CVE-2023-51645 Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 4.7 EPSS 1.8%

    Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mec...

15. CVE-2023-51644 Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability

    Published 2024-11-22

    High·CVSS 7.3 EPSS 2.0%

    Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists...

16. CVE-2023-51643 Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 4.7 EPSS 2.2%

    Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication me...

17. CVE-2023-51642 Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 6.3 EPSS 1.3%

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product impl...

18. CVE-2023-51641 Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 6.3 EPSS 1.3%

    Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product i...

19. CVE-2023-51640 Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability

    Published 2024-11-22

    Medium·CVSS 4.7 EPSS 1.8%

    Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentica...

20. CVE-2023-51639 Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability

    Published 2024-11-22

    Critical·CVSS 9.8 EPSS 2.5%

    Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists...

21. CVE-2023-51638 Allegra Hard-coded Credentials Authentication Bypass Vulnerability

    Published 2024-11-22

    Critical·CVSS 9.8 EPSS 1.4%

    Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configur...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.