CVE-2023-51646 Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability

Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can...

CVE-2023-51646

CVE-2023-51646 affects Allegra. The vulnerability resides in the uploadSimpleFile method and stems from improper validation of a user-supplied path used in file operations, enabling a directory-traversal attack that can lead to remote code execution. Attack context: the code would run with LOCAL ...