CVE-2023-51638: falha crítica em Allegra
Allegra Hard-coded Credentials Authentication Bypass Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.4%
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the configuration of a database. The issue results from the use of a hardcoded password. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-22360.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Allegra · AllegraCVEs relacionadas — Allegra
No mesmo produto, das mais perigosas para as menos.
CVE-2025-6216CRITICALAllegra calculateTokenExpDate Password Recovery Authentication Bypass VulnerabilityEPSS 47.8%CVE-2023-51639CRITICALAllegra downloadExportedChart Directory Traversal Authentication Bypass VulnerabilityEPSS 2.5%CVE-2024-5581HIGHAllegra unzipFile Directory Traversal Remote Code Execution VulnerabilityEPSS 2.4%CVE-2023-51647HIGHAllegra saveInlineEdit Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2023-51643HIGHAllegra uploadFile Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2023-52332HIGHAllegra serveMathJaxLibraries Directory Traversal Information Disclosure VulnerabilityEPSS 2.1%