Lucene search
+L

9 matches found

attackerkb
attackerkb
•added 2024/11/22 8:15 p.m.•36 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS7.1AI score0.01931EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/11/22 8:15 p.m.•19 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

6.5CVSS7.1AI score0.01931EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/22 8:15 p.m.•69 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS0.01931EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/22 8:05 p.m.•82 views

CVE-2023-51648

CVE-2023-51648 affects Allegra, via the getFileContentAsString method which is vulnerable to directory traversal information disclosure. The root cause is improper validation of a user-supplied path used in file operations, enabling disclosure of sensitive data including stored credentials. Some ...

7.5CVSS7.1AI score0.01931EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/22 8:05 p.m.•16 views

CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS7.1AI score0.01931EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/22 8:05 p.m.•54 views

CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS0.01931EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•10 views

CVE-2023-51648: Improper Limitation of a Pathname to a Restricted Directory

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS7.1AI score0.01931EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•26 views

PT-2024-14224 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra version 7.5.0 Build 29 Description: This issue allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this issue, the product implements a...

7.5CVSS7AI score0.01931EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2024/02/09 12:00 a.m.•31 views

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a registration mechanism that can be used to create a new user with a sufficient privilege...

7.5CVSS7.1AI score0.01931EPSS
SaveExploits0References1
Rows per page
Query Builder