Lucene search
K

8 matches found

NVD
NVD
added 2024/11/22 8:15 p.m.15 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS0.01266EPSS
Exploits0References2
OSV
OSV
added 2024/11/22 8:15 p.m.1 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

6.5CVSS5.7AI score0.01266EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2024/11/22 8:15 p.m.3 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS5.7AI score0.01266EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/11/22 8:5 p.m.18 views

CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS0.01266EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.9 views

CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS7.3AI score0.01266EPSS
Exploits0References2
CVE
CVE
added 2024/11/22 8:5 p.m.43 views

CVE-2023-51648

CVE-2023-51648 affects Allegra, via the getFileContentAsString method which is vulnerable to directory traversal information disclosure. The root cause is improper validation of a user-supplied path used in file operations, enabling disclosure of sensitive data including stored credentials. Some ...

7.5CVSS7.3AI score0.01266EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/09 12:0 a.m.3 views

PT-2024-14224 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra version 7.5.0 Build 29 Description: This issue allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this issue, the product implements a...

7.5CVSS6.8AI score0.01266EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/02/09 12:0 a.m.14 views

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a registration mechanism that can be used to create a new user with a sufficient privilege...

7.5CVSS6.5AI score0.01266EPSS
Exploits0References1
Rows per page
Query Builder