allegra vulnerabilities and fixes

Recent CVEs affecting allegra, with upgrade or downgrade steps. 21 tracked.

allegra has 21 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 21. Most recent: 2025-06-21. Highest priority: CVE-2025-6216 (score 67/100).

• CVE-2025-6216 CRITICAL 9.8 UPGRADE Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability
• CVE-2025-3486 HIGH 8.8 UPGRADE Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability
• CVE-2025-3485 HIGH 8.8 UPGRADE Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability
• CVE-2024-5581 HIGH 7.2 UPGRADE Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability
• CVE-2024-5580 HIGH 7.2 UPGRADE Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2024-5579 HIGH 7.2 UPGRADE Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2024-30372 MEDIUM 6.3 UPGRADE Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability
• CVE-2023-52334 MEDIUM 6.5 UPGRADE Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability
• CVE-2023-52333 HIGH 7.3 UPGRADE Allegra saveFile Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-52332 HIGH 7.5 UPGRADE Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability
• CVE-2023-51648 MEDIUM 6.5 UPGRADE Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability
• CVE-2023-51647 MEDIUM 4.7 UPGRADE Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-51646 MEDIUM 4.7 UPGRADE Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-51645 MEDIUM 4.7 UPGRADE Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-51644 HIGH 7.3 UPGRADE Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability
• CVE-2023-51643 MEDIUM 4.7 UPGRADE Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-51642 MEDIUM 6.3 UPGRADE Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2023-51641 MEDIUM 6.3 UPGRADE Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability
• CVE-2023-51640 MEDIUM 4.7 UPGRADE Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-51639 CRITICAL 9.8 UPGRADE Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability
• CVE-2023-51638 CRITICAL 9.8 UPGRADE Allegra Hard-coded Credentials Authentication Bypass Vulnerability

FAQ

How do I fix allegra vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is allegra being exploited right now?

None of the tracked allegra CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which allegra CVE should I patch first?

CVE-2025-6216 currently ranks highest (67/100): Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability.

RSS feed for allegra · ← Back to latest CVEs