Skip to content
OpenAdvisories

Vendor

Allegra

24 known vulnerabilities.

Products

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6216 EPSS 48%

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The sp…

  • Critical 9.8

    Allegra saveFile Directory Traversal Remote Code Execution Vulnerability

    Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product imp…

  • Critical 9.8

    Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability

    Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The …

  • Critical 9.8

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulner…

  • Critical 9.8

    Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

    Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vul…

  • Critical 9.8

    Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability

    Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The …

  • Critical 9.8

    Allegra Hard-coded Credentials Authentication Bypass Vulnerability

    Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exist…