https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6216.htmlhttps://patchthecve.com/cve/CVE-2025-6216.htmlWed, 17 Jun 2026 10:01:24 +0000CRITICAL 9.8: Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password rhttps://patchthecve.com/cve/CVE-2025-3485.htmlhttps://patchthecve.com/cve/CVE-2025-3485.htmlWed, 17 Jun 2026 09:20:02 +0000HIGH 8.8: Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementationhttps://patchthecve.com/cve/CVE-2025-3486.htmlhttps://patchthecve.com/cve/CVE-2025-3486.htmlWed, 17 Jun 2026 09:20:02 +0000HIGH 8.8: Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation ohttps://patchthecve.com/cve/CVE-2024-5581.htmlhttps://patchthecve.com/cve/CVE-2024-5581.htmlWed, 17 Jun 2026 08:16:13 +0000HIGH 7.2: Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the unzipFile method. The ihttps://patchthecve.com/cve/CVE-2024-5580.htmlhttps://patchthecve.com/cve/CVE-2024-5580.htmlWed, 17 Jun 2026 08:16:13 +0000HIGH 7.2: Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the loadhttps://patchthecve.com/cve/CVE-2024-5579.htmlhttps://patchthecve.com/cve/CVE-2024-5579.htmlWed, 17 Jun 2026 08:16:13 +0000HIGH 7.2: Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the rehttps://patchthecve.com/cve/CVE-2024-30372.htmlhttps://patchthecve.com/cve/CVE-2024-30372.htmlWed, 17 Jun 2026 07:26:50 +0000MEDIUM 6.3: Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementahttps://patchthecve.com/cve/CVE-2023-52334.htmlhttps://patchthecve.com/cve/CVE-2023-52334.htmlWed, 17 Jun 2026 06:42:29 +0000MEDIUM 6.5: Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registhttps://patchthecve.com/cve/CVE-2023-52333.htmlhttps://patchthecve.com/cve/CVE-2023-52333.htmlWed, 17 Jun 2026 06:42:29 +0000HIGH 7.3: Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that canhttps://patchthecve.com/cve/CVE-2023-52332.htmlhttps://patchthecve.com/cve/CVE-2023-52332.htmlWed, 17 Jun 2026 06:42:29 +0000HIGH 7.5: Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within thttps://patchthecve.com/cve/CVE-2023-51648.htmlhttps://patchthecve.com/cve/CVE-2023-51648.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 6.5: Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a regihttps://patchthecve.com/cve/CVE-2023-51647.htmlhttps://patchthecve.com/cve/CVE-2023-51647.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 4.7: Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bhttps://patchthecve.com/cve/CVE-2023-51646.htmlhttps://patchthecve.com/cve/CVE-2023-51646.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 4.7: Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can behttps://patchthecve.com/cve/CVE-2023-51645.htmlhttps://patchthecve.com/cve/CVE-2023-51645.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 4.7: Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypasshttps://patchthecve.com/cve/CVE-2023-51644.htmlhttps://patchthecve.com/cve/CVE-2023-51644.htmlWed, 17 Jun 2026 06:41:23 +0000HIGH 7.3: Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuhttps://patchthecve.com/cve/CVE-2023-51643.htmlhttps://patchthecve.com/cve/CVE-2023-51643.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 4.7: Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypashttps://patchthecve.com/cve/CVE-2023-51642.htmlhttps://patchthecve.com/cve/CVE-2023-51642.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 6.3: Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registratiohttps://patchthecve.com/cve/CVE-2023-51641.htmlhttps://patchthecve.com/cve/CVE-2023-51641.htmlWed, 17 Jun 2026 06:41:23 +0000MEDIUM 6.3: Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registrahttps://patchthecve.com/cve/CVE-2023-51640.htmlhttps://patchthecve.com/cve/CVE-2023-51640.htmlWed, 17 Jun 2026 06:41:22 +0000MEDIUM 4.7: Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can bhttps://patchthecve.com/cve/CVE-2023-51639.htmlhttps://patchthecve.com/cve/CVE-2023-51639.htmlWed, 17 Jun 2026 06:41:22 +0000CRITICAL 9.8: Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloahttps://patchthecve.com/cve/CVE-2023-51638.htmlhttps://patchthecve.com/cve/CVE-2023-51638.htmlWed, 17 Jun 2026 06:41:22 +0000CRITICAL 9.8: Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a databas