Priority LOW 39
Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01931 · Published 2024-11-22 · No fix listed CWE-22
Priority MEDIUM 44
Allegra saveFile Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01907 · Published 2024-11-22 · No fix listed CWE-22
Priority MEDIUM 43
Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02063 · Published 2024-11-22 · No fix listed CWE-22
Priority LOW 39
Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01931 · Published 2024-11-22 · No fix listed CWE-22
Priority LOW 28
Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.02201 · Published 2024-11-22 · No fix listed CWE-22
Priority LOW 27
Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.01841 · Published 2024-11-22 · No fix listed CWE-22
Priority LOW 27
Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.01841 · Published 2024-11-22 · No fix listed CWE-22
Priority MEDIUM 44
Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.0198 · Published 2024-11-22 · No fix listed CWE-284
Priority LOW 28
Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.02199 · Published 2024-11-22 · No fix listed CWE-22
Priority LOW 39
Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.01295 · Published 2024-11-22 · No fix listed CWE-502
Priority LOW 39
Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.01295 · Published 2024-11-22 · No fix listed CWE-502
Priority LOW 27
Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.01841 · Published 2024-11-22 · No fix listed CWE-22
Priority MEDIUM 54
Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02488 · Published 2024-11-22 · No fix listed CWE-22
Priority MEDIUM 52
Allegra Hard-coded Credentials Authentication Bypass Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01372 · Published 2024-11-22 · No fix listed CWE-798