CVE Details
Basic Information
| Title |
CVE-2025-3486 |
| Type |
cve |
| Published |
2025-05-22T01:15:53 |
| Last Seen |
2025-05-22T01:26:09 |
CVSS Information
| Base Score |
7.2 (HIGH) |
| Attack Vector |
NETWORK |
| Attack Complexity |
LOW |
| Privileges Required |
HIGH |
| User Interaction |
NONE |
| Scope |
UNCHANGED |
| Confidentiality Impact |
HIGH |
| Integrity Impact |
HIGH |
| Availability Impact |
HIGH |
AI Analysis
| AI Description |
This vulnerability in Allegra allows authenticated remote attackers to execute arbitrary code via a directory traversal in the isZipEntryValide function. The vulnerability is due to insufficient validation of user-supplied input, which can be exploited to write arbitrary files to the filesystem and potentially lead to remote code execution. |
| AI Severity |
High |
| Vendor |
Allegra |
| Product |
Allegra |
| Affected Version |
|
Additional Information
| CVE List |
CVE-2025-3486 |
| CWE List |
CWE-22 |
| Bulletin Family |
cve |
Description
Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The…
CVSS Score Summary
Base Score: %!f(string=#) (HIGH)
View Full CVE Details
