alltena records

21 published records for vendor alltena.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
53Plan	CVE-2025-6216Proof of concept	Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerabilityalltena · allegra · CWE-640 Pre-auth Auth bypass	Critical9.8	—	47.7%	Jun 20, 2025
40Plan	CVE-2023-51639No exploit	Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerabilityalltena · allegra · CWE-22 Pre-auth Auth bypass Path traversal	Critical9.8	—	2.4%	Nov 22, 2024
39Monitor	CVE-2023-51638No exploit	Allegra Hard-coded Credentials Authentication Bypass Vulnerabilityalltena · allegra · CWE-798 Pre-auth Auth bypass Hard-coded credentials	Critical9.8	—	1.3%	Nov 22, 2024
36Monitor	CVE-2025-3485No exploit	Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	High8.8	—	1.8%	Jun 6, 2025
35Monitor	CVE-2025-3486No exploit	Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	High8.8	—	1.6%	May 21, 2025
31Monitor	CVE-2023-52332No exploit	Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerabilityalltena · allegra · CWE-22 Pre-auth Path traversal	High7.5	—	2.0%	Nov 22, 2024
30Monitor	CVE-2023-51644No exploit	Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerabilityalltena · allegra · CWE-284 pre-auth RCE Broken access control (IDOR)	High7.3	—	1.9%	Nov 22, 2024
30Monitor	CVE-2023-52333No exploit	Allegra saveFile Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 pre-auth RCE Path traversal	High7.3	—	1.9%	Nov 22, 2024
29Monitor	CVE-2024-5581No exploit	Allegra unzipFile Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	High7.2	—	2.3%	Nov 22, 2024
28Monitor	CVE-2024-5580No exploit	Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerabilityalltena · allegra · CWE-502 RCE Deserialization	High7.2	—	1.5%	Nov 22, 2024
28Monitor	CVE-2024-5579No exploit	Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerabilityalltena · allegra · CWE-502 RCE Deserialization	High7.2	—	1.5%	Nov 22, 2024
27Monitor	CVE-2023-51648No exploit	Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerabilityalltena · allegra · CWE-22 Path traversal	Medium6.5	—	1.9%	Nov 22, 2024
27Monitor	CVE-2023-52334No exploit	Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerabilityalltena · allegra · CWE-22 Path traversal	Medium6.5	—	1.9%	Nov 22, 2024
25Monitor	CVE-2023-51641No exploit	Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerabilityalltena · allegra · CWE-502 RCE Deserialization	Medium6.3	—	1.2%	Nov 22, 2024
25Monitor	CVE-2023-51642No exploit	Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerabilityalltena · allegra · CWE-502 RCE Deserialization	Medium6.3	—	1.2%	Nov 22, 2024
25Monitor	CVE-2024-30372No exploit	Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerabilityalltena · allegra · CWE-1336 RCE SSTI	Medium6.3	—	1.1%	Nov 22, 2024
19Monitor	CVE-2023-51647No exploit	Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	Medium4.7	—	2.2%	Nov 22, 2024
19Monitor	CVE-2023-51643No exploit	Allegra uploadFile Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	Medium4.7	—	2.1%	Nov 22, 2024
19Monitor	CVE-2023-51646No exploit	Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	Medium4.7	—	1.8%	Nov 22, 2024
19Monitor	CVE-2023-51645No exploit	Allegra unzipFile Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	Medium4.7	—	1.8%	Nov 22, 2024
19Monitor	CVE-2023-51640No exploit	Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerabilityalltena · allegra · CWE-22 RCE Path traversal	Medium4.7	—	1.8%	Nov 22, 2024

CVE-2025-6216
53Plan
Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 47%
- Pre-auth
- Auth bypass
alltena · allegraJun 20, 2025
CVE-2023-51639
40Plan
Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51638
39Monitor
Allegra Hard-coded Credentials Authentication Bypass Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
- Hard-coded credentials
alltena · allegraNov 22, 2024
CVE-2025-3485
36Monitor
Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Path traversal
alltena · allegraJun 6, 2025
CVE-2025-3486
35Monitor
Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Path traversal
alltena · allegraMay 21, 2025
CVE-2023-52332
31Monitor
Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51644
30Monitor
Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability
HighCVSS 7.3No exploitEPSS 1%
- pre-auth RCE
- Broken access control (IDOR)
alltena · allegraNov 22, 2024
CVE-2023-52333
30Monitor
Allegra saveFile Directory Traversal Remote Code Execution Vulnerability
HighCVSS 7.3No exploitEPSS 1%
- pre-auth RCE
- Path traversal
alltena · allegraNov 22, 2024
CVE-2024-5581
29Monitor
Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 2%
- RCE
- Path traversal
alltena · allegraNov 22, 2024
CVE-2024-5580
28Monitor
Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Deserialization
alltena · allegraNov 22, 2024
CVE-2024-5579
28Monitor
Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Deserialization
alltena · allegraNov 22, 2024
CVE-2023-51648
27Monitor
Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-52334
27Monitor
Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51641
25Monitor
Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability
MediumCVSS 6.3No exploitEPSS 1%
- RCE
- Deserialization
alltena · allegraNov 22, 2024
CVE-2023-51642
25Monitor
Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability
MediumCVSS 6.3No exploitEPSS 1%
- RCE
- Deserialization
alltena · allegraNov 22, 2024
CVE-2024-30372
25Monitor
Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability
MediumCVSS 6.3No exploitEPSS 1%
- RCE
- SSTI
alltena · allegraNov 22, 2024
CVE-2023-51647
19Monitor
Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability
MediumCVSS 4.7No exploitEPSS 2%
- RCE
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51643
19Monitor
Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability
MediumCVSS 4.7No exploitEPSS 2%
- RCE
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51646
19Monitor
Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability
MediumCVSS 4.7No exploitEPSS 1%
- RCE
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51645
19Monitor
Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability
MediumCVSS 4.7No exploitEPSS 1%
- RCE
- Path traversal
alltena · allegraNov 22, 2024
CVE-2023-51640
19Monitor
Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability
MediumCVSS 4.7No exploitEPSS 1%
- RCE
- Path traversal
alltena · allegraNov 22, 2024