Lucene search
K

4 matches found

Cvelist
Cvelist
added 2024/11/22 8:5 p.m.19 views

CVE-2023-51647 Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability

Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can b...

7.2CVSS0.00833EPSS
Exploits0References2
CVE
CVE
added 2024/11/22 8:5 p.m.44 views

CVE-2023-51647

CVE-2023-51647 affects Allegra’s saveInlineEdit function, where lack of validation of a user-supplied path in file operations enables a directory traversal path to execute code. The issue allows remote code execution in the LOCAL SERVICE context. Exploitation is described as network-based with lo...

7.2CVSS7.5AI score0.00833EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.14 views

CVE-2023-51647 Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability

Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can b...

7.2CVSS7.5AI score0.00833EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra that stems from the saveInlineEdit feature containing a directory traversal remote code execution vulnerability...

7.2CVSS7.5AI score0.00833EPSS
Exploits0References2
Rows per page
Query Builder