Lucene search
+L

9 matches found

OSV
OSV
•added 2024/11/22 8:15 p.m.•16 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

6.5CVSS5.7AI score0.01931EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/11/22 8:15 p.m.•33 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS5.7AI score0.01931EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/22 8:15 p.m.•66 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS0.01931EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/22 8:05 p.m.•76 views

CVE-2023-51648

CVE-2023-51648 affects Allegra, via the getFileContentAsString method which is vulnerable to directory traversal information disclosure. The root cause is improper validation of a user-supplied path used in file operations, enabling disclosure of sensitive data including stored credentials. Some ...

7.5CVSS7.3AI score0.01931EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/22 8:05 p.m.•13 views

CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS7.3AI score0.01931EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/22 8:05 p.m.•49 views

CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS0.01931EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•5 views

CVE-2023-51648: Improper Limitation of a Pathname to a Restricted Directory

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a...

7.5CVSS7.2AI score0.01931EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•22 views

PT-2024-14224 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra version 7.5.0 Build 29 Description: This issue allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this issue, the product implements a...

7.5CVSS6.8AI score0.01931EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2024/02/09 12:00 a.m.•28 views

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a registration mechanism that can be used to create a new user with a sufficient privilege...

7.5CVSS6.5AI score0.01931EPSS
SaveExploits0References1
Rows per page
Query Builder