ZDI-24-112: Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability

Read Time:18 Second

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-22507.

Read More