Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Allegra — vendor-provided URL Clear all filters
TI-2024-05185 CVE-2024-5581 · GHSA-fwr5-w9hq-mx49

Path traversal in Allegra

Priority LOW 38

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02359 Published 2024-11-22 No fix listed CWE-22
TI-2024-05184 CVE-2024-5580 · GHSA-4j3h-3q3j-9f5g

Deserialization of untrusted data in Allegra

Priority LOW 37

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01553 Published 2024-11-22 No fix listed CWE-502
TI-2024-05183 CVE-2024-5579 · GHSA-qp7v-hp83-pq4x

Deserialization of untrusted data in Allegra

Priority LOW 37

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01552 Published 2024-11-22 No fix listed CWE-502