Alltena
Alltena Allegra: vulnerabilidades y CVE
Alltena Allegra tiene 24 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE24
Últimos 12 meses3
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-11443 | Media (4.6) | 0.82% | — | 13 jun 2026 | Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is… |
| CVE-2026-11442 | Media (6.5) | 1.3% | — | 13 jun 2026 | Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is… |
| CVE-2025-11466 | Media (4.9) | 1.6% | — | 29 oct 2025 | Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is… |
| CVE-2025-6216 | Crítica (9.8) | 48% | — | 21 jun 2025 | Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not… |
| CVE-2025-3485 | Alta (8.8) | 1.7% | — | 6 jun 2025 | Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required… |
| CVE-2025-3486 | Alta (8.8) | 1.6% | — | 22 may 2025 | Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to… |
| CVE-2024-5581 | Alta (7.2) | 2.4% | — | 22 nov 2024 | Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit… |
| CVE-2024-5580 | Alta (7.2) | 1.6% | — | 22 nov 2024 | Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is… |
| CVE-2024-5579 | Alta (7.2) | 1.6% | — | 22 nov 2024 | Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication… |
| CVE-2024-30372 | Media (6.3) | 1.2% | — | 22 nov 2024 | Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is… |
| CVE-2023-52334 | Media (6.5) | 1.9% | — | 22 nov 2024 | Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although… |
| CVE-2023-52333 | Alta (7.3) | 1.9% | — | 22 nov 2024 | Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to… |
| CVE-2023-52332 | Alta (7.5) | 2.1% | — | 22 nov 2024 | Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication… |
| CVE-2023-51648 | Media (6.5) | 1.9% | — | 22 nov 2024 | Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although… |
| CVE-2023-51647 | Media (4.7) | 2.2% | — | 22 nov 2024 | Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is… |
| CVE-2023-51646 | Media (4.7) | 1.8% | — | 22 nov 2024 | Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is… |
| CVE-2023-51645 | Media (4.7) | 1.8% | — | 22 nov 2024 | Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required… |
| CVE-2023-51644 | Alta (7.3) | 2.0% | — | 22 nov 2024 | Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not… |
| CVE-2023-51643 | Media (4.7) | 2.2% | — | 22 nov 2024 | Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required… |
| CVE-2023-51642 | Media (6.3) | 1.3% | — | 22 nov 2024 | Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although… |
| CVE-2023-51641 | Media (6.3) | 1.3% | — | 22 nov 2024 | Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although… |
| CVE-2023-51640 | Media (4.7) | 1.8% | — | 22 nov 2024 | Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is… |
| CVE-2023-51639 | Crítica (9.8) | 2.5% | — | 22 nov 2024 | Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not… |
| CVE-2023-51638 | Crítica (9.8) | 1.4% | — | 22 nov 2024 | Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.