Allegra

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Allegra records in CISA KEV

No Allegra vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Allegra 21 records HIGH

Records

24 records

TI-2025-05624 CVE-2025-6216 · GHSA-7jmp-283p-h6xj

Weak password recovery in Allegra

HIGH 79

Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.47775 Published 2025-06-21 No fix listed CWE-640

TI-2023-28290 CVE-2023-51639 · GHSA-g8p3-q878-476h

Path traversal in Allegra

MEDIUM 54

Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02488 Published 2024-11-22 No fix listed CWE-22

TI-2023-28289 CVE-2023-51638 · GHSA-5r59-wwwh-xxvm

Hard-coded credentials in Allegra

MEDIUM 52

Allegra Hard-coded Credentials Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01372 Published 2024-11-22 No fix listed CWE-798

TI-2025-03063 CVE-2025-3485 · GHSA-w2hq-6wrg-qrh6

Path traversal in Allegra

MEDIUM 44

Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01877 Published 2025-06-06 No fix listed CWE-22

TI-2023-28717 CVE-2023-52333 · GHSA-3g45-m7q2-c5g9

Path traversal in Allegra

MEDIUM 44

Allegra saveFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01907 Published 2024-11-22 No fix listed CWE-22

TI-2023-28295 CVE-2023-51644 · GHSA-qqcr-x579-7pxp

Improper access control in Allegra

MEDIUM 44

Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0198 Published 2024-11-22 No fix listed CWE-284

TI-2025-03064 CVE-2025-3486 · GHSA-43w6-2c4j-7whm

Path traversal in Allegra

MEDIUM 43

Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01645 Published 2025-05-22 No fix listed CWE-22

TI-2023-28716 CVE-2023-52332 · GHSA-hxgh-cc73-q76h

Path traversal in Allegra

MEDIUM 43

Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02063 Published 2024-11-22 No fix listed CWE-22

TI-2023-28718 CVE-2023-52334 · GHSA-rh75-4g63-jhj7

Path traversal in Allegra

LOW 39

Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01931 Published 2024-11-22 No fix listed CWE-22

TI-2023-28299 CVE-2023-51648 · GHSA-qrm7-h6wj-g2mx

Path traversal in Allegra

LOW 39

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01931 Published 2024-11-22 No fix listed CWE-22

TI-2023-28293 CVE-2023-51642 · GHSA-3pq3-cxgx-g86g

Deserialization of untrusted data in Allegra

LOW 39

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01295 Published 2024-11-22 No fix listed CWE-502

TI-2023-28292 CVE-2023-51641 · GHSA-5gqf-2mwx-x4qq

Deserialization of untrusted data in Allegra

LOW 39

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01295 Published 2024-11-22 No fix listed CWE-502

TI-2024-05185 CVE-2024-5581 · GHSA-fwr5-w9hq-mx49

Path traversal in Allegra

LOW 38

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02359 Published 2024-11-22 No fix listed CWE-22

TI-2024-05184 CVE-2024-5580 · GHSA-4j3h-3q3j-9f5g

Deserialization of untrusted data in Allegra

LOW 37

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01553 Published 2024-11-22 No fix listed CWE-502

TI-2024-05183 CVE-2024-5579 · GHSA-qp7v-hp83-pq4x

Deserialization of untrusted data in Allegra

LOW 37

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01552 Published 2024-11-22 No fix listed CWE-502

TI-2024-20109 CVE-2024-30372 · GHSA-cwgv-jwgm-r5f5

Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability

LOW 32

Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01161 Published 2024-11-22 No fix listed CWE-1336

TI-2026-09873 CVE-2026-11442 · GHSA-p625-mq37-453v

Path traversal in Allegra

LOW 31

Allegra exportReport Directory Traversal Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01258 Published 2026-06-12 No fix listed CWE-22

TI-2023-28298 CVE-2023-51647 · GHSA-fm3p-g673-crw6

Path traversal in Allegra

LOW 28

Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.02201 Published 2024-11-22 No fix listed CWE-22

TI-2023-28294 CVE-2023-51643 · GHSA-5r22-m8q2-2p79

Path traversal in Allegra

LOW 28

Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.02199 Published 2024-11-22 No fix listed CWE-22

TI-2023-28297 CVE-2023-51646 · GHSA-v35f-jr52-fwpj

Path traversal in Allegra

LOW 27

Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.01841 Published 2024-11-22 No fix listed CWE-22

TI-2023-28296 CVE-2023-51645 · GHSA-wmcv-j9w5-vgv5

Path traversal in Allegra

LOW 27

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.01841 Published 2024-11-22 No fix listed CWE-22

TI-2023-28291 CVE-2023-51640 · GHSA-pw24-4j78-83gj

Path traversal in Allegra

LOW 27

Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.01841 Published 2024-11-22 No fix listed CWE-22

TI-2025-10504 CVE-2025-11466 · GHSA-q3g4-86cm-rj2h

Path traversal in Allegra

LOW 26

Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.0157 Published 2025-10-29 No fix listed CWE-22

TI-2026-09874 CVE-2026-11443 · GHSA-m8wq-7mhg-mgm7

Cross-site scripting in Allegra

LOW 23

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability.

CVSS 3.0MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00819 Published 2026-06-12 No fix listed CWE-79

Open these records in search →