AAllegra

Products

Exploited and recent CVEs

• CVE-2026-11443 Medium 4.6 Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability 0.8%
• CVE-2026-11442 Medium 6.5 Allegra exportReport Directory Traversal Information Disclosure Vulnerability 1.3%
• CVE-2025-11466 Medium 4.9 Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability 1.6%
• CVE-2025-6216 Critical 9.8 Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability 47.8%
• CVE-2025-3485 High 7.2 Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability 1.9%
• CVE-2025-3486 High 7.2 Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability 1.6%
• CVE-2024-5581 High 7.2 Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability 2.4%
• CVE-2024-5580 High 7.2 Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.6%
• CVE-2024-5579 High 7.2 Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.6%
• CVE-2024-30372 High 8.8 Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability 1.2%
• CVE-2023-52334 High 7.5 Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability 1.9%
• CVE-2023-52333 Critical 9.8 Allegra saveFile Directory Traversal Remote Code Execution Vulnerability 1.9%
• CVE-2023-52332 High 7.5 Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability 2.1%
• CVE-2023-51648 High 7.5 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability 1.9%
• CVE-2023-51647 High 7.2 Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability 2.2%
• CVE-2023-51646 High 7.2 Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability 1.8%
• CVE-2023-51645 High 7.2 Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability 1.8%
• CVE-2023-51644 Critical 9.8 Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability 2.0%
• CVE-2023-51643 High 7.2 Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability 2.2%
• CVE-2023-51642 Critical 9.8 Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.3%
• CVE-2023-51641 Critical 9.8 Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability 1.3%
• CVE-2023-51640 High 7.2 Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability 1.8%
• CVE-2023-51639 Critical 9.8 Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability 2.5%
• CVE-2023-51638 Critical 9.8 Allegra Hard-coded Credentials Authentication Bypass Vulnerability 1.4%