ZDI-CAN-22507: ZDI-24-112: Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The specific flaw exists within the downloadAttachmentGlobal action. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-22507.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22507?
The vulnerability ZDI-CAN-22507 is classified as a medium severity issue due to its potential for sensitive information disclosure.
How do I fix ZDI-CAN-22507?
To mitigate the impact of ZDI-CAN-22507, update the Allegra software to the latest version that addresses this vulnerability.
Who is affected by ZDI-CAN-22507?
ZDI-CAN-22507 affects installations of Allegra that have not implemented security measures to restrict user registration.
Can ZDI-CAN-22507 be exploited without credentials?
While ZDI-CAN-22507 requires authentication, attackers can exploit it through the registration mechanism to create a valid user account.
What types of information can be disclosed by ZDI-CAN-22507?
ZDI-CAN-22507 may allow remote attackers to access sensitive user information stored in affected Allegra installations.