Lucene search

K
AlltenaAllegra

6 matches found

CVE
CVE
added 2024/11/22 8:15 p.m.39 views

CVE-2023-51642

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registrati...

9.8CVSS9.9AI score0.03265EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.37 views

CVE-2023-52333

Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that ca...

9.8CVSS9.9AI score0.0153EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.35 views

CVE-2023-51638

Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a database...

9.8CVSS9.7AI score0.00396EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.35 views

CVE-2023-51639

Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the download...

9.8CVSS9.7AI score0.00576EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.33 views

CVE-2023-51641

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registr...

9.8CVSS9.9AI score0.03265EPSS
CVE
CVE
added 2024/11/22 8:15 p.m.33 views

CVE-2023-51644

Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configur...

9.8CVSS9.9AI score0.01276EPSS