Lucene search

K
AlltenaAllegra

11 matches found

CVE
CVE
added 2024/11/22 8:15 p.m.38 views

CVE-2023-51643

Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypa...

7.2CVSS7.5AI score0.02908EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.37 views

CVE-2023-51647

Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be ...

7.2CVSS7.5AI score0.02908EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.37 views

CVE-2023-52332

Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

7.5CVSS7.2AI score0.00999EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.37 views

CVE-2024-5579

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the re...

7.2CVSS7.5AI score0.05951EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.37 views

CVE-2024-5581

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the unzipFile method. The i...

7.2CVSS7.5AI score0.1173EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.36 views

CVE-2023-51645

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypas...

7.2CVSS7.5AI score0.01579EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.35 views

CVE-2023-51640

Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can ...

7.2CVSS7.5AI score0.01579EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.35 views

CVE-2023-51646

Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can b...

7.2CVSS7.5AI score0.01182EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.35 views

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a reg...

7.5CVSS7.3AI score0.00489EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.35 views

CVE-2024-5580

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the load...

7.2CVSS7.5AI score0.05951EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.33 views

CVE-2023-52334

Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a regis...

7.5CVSS7.3AI score0.00489EPSS