What’s Vulnerable › Products
Allegra vulnerabilities
24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 24 published in the last 12 months.
Check whether your Allegra version is affected
Latest Allegra vulnerabilities
- CVE-2026-11443 — Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability (CVSS 4.6)
- CVE-2026-11442 — Allegra exportReport Directory Traversal Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2025-11466 — Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability (CVSS 4.9)
- CVE-2025-6216 — Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2025-3485 — Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2025-3486 — Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2024-5581 — Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2024-5580 — Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2024-5579 — Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2024-30372 — Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability (CVSS 6.3)
- CVE-2023-52334 — Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2023-52333 — Allegra saveFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.3)
- CVE-2023-52332 — Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2023-51648 — Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2023-51647 — Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability (CVSS 4.7)
- CVE-2023-51646 — Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability (CVSS 4.7)
- CVE-2023-51645 — Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability (CVSS 4.7)
- CVE-2023-51644 — Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability (CVSS 7.3)
- CVE-2023-51643 — Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability (CVSS 4.7)
- CVE-2023-51642 — Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 6.3)
- CVE-2023-51641 — Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability (CVSS 6.3)
- CVE-2023-51640 — Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability (CVSS 4.7)
- CVE-2023-51639 — Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2023-51638 — Allegra Hard-coded Credentials Authentication Bypass Vulnerability (CVSS 9.8)