{"id":"CVE-2023-51645","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-51645","generatedAt":"2026-10-28T02:13:35.768Z","title":"Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability.","description":"Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the unzipFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE. Was ZDI-CAN-22513.","published":"2024-11-22T20:15:07.000Z","lastModified":"2026-06-17T06:41:24.000Z","status":"Analyzed","sourceIdentifier":"zdi-disclosures@trendmicro.com","cvss":{"version":"3.1","score":4.7,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},"cwe":["CWE-22"],"affected":["alltena/allegra"],"epss":{"score":0.01841,"percentile":0.78849,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.84%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.trackplus.com/en/service/release-notes-reader/7-5-1-release-notes-2.html","tags":["Release Notes"],"source":"zdi-disclosures@trendmicro.com"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-101/","tags":["Third Party Advisory"],"source":"zdi-disclosures@trendmicro.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-51645","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}