CVE-2025-3486

Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the isZipEntryValide method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE. Was ZDI-CAN-25730.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-2	Release Notes Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-255/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:alltena:allegra:*:*:*:*:*:*:*:*

History

15 Aug 2025, 16:47

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.2~~	v2 : unknown v3 : 8.8
First Time		Alltena Alltena allegra
CPE		cpe:2.3:a:alltena:allegra::::::::
References	~~() https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-2 -~~	() https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-2 - Release Notes, Vendor Advisory
References	~~() https://www.zerodayinitiative.com/advisories/ZDI-25-255/ -~~	() https://www.zerodayinitiative.com/advisories/ZDI-25-255/ - Third Party Advisory

23 May 2025, 15:55

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-22 01:15

Updated : 2025-08-15 16:47

NVD link : CVE-2025-3486

Mitre link : CVE-2025-3486

CVE.ORG link : CVE-2025-3486

JSON object : View

Products Affected

alltena

allegra

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2025-3486", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "zdi-disclosures@trendmicro.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2025-05-22T01:15:53.610", "references": [{"url": "https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-2", "tags": ["Release Notes", "Vendor Advisory"], "source": "zdi-disclosures@trendmicro.com"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-255/", "tags": ["Third Party Advisory"], "source": "zdi-disclosures@trendmicro.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "zdi-disclosures@trendmicro.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the isZipEntryValide method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE. Was ZDI-CAN-25730."}, {"lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo en Allegra isZipEntryValide al Directory Traversal. Esta vulnerabilidad permite a atacantes remotos ejecutar c\u00f3digo arbitrario en las instalaciones afectadas de Allegra. Se requiere autenticaci\u00f3n para explotar esta vulnerabilidad. La falla espec\u00edfica se encuentra en la implementaci\u00f3n del m\u00e9todo isZipEntryValide. El problema se debe a la falta de validaci\u00f3n adecuada de una ruta proporcionada por el usuario antes de usarla en operaciones con archivos. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto de un servicio local. Era ZDI-CAN-25730."}], "lastModified": "2025-08-15T16:47:30.040", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alltena:allegra:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25F69F8E-D579-4BCC-B377-138EAA162665", "versionEndExcluding": "8.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "zdi-disclosures@trendmicro.com"}