Deserialization Vulnerability in Allegra by Allegra Systems
CVE-2024-5579

Currently unrated

Key Information:

Vendor

Allegra Systems

Status
Allegra
Vendor
CVE Published:
22 November 2024

What is CVE-2024-5579?

A deserialization vulnerability in the Allegra renderFieldMatch method enables remote attackers to execute arbitrary code on affected installations. By exploiting improper validation of user-supplied data, attackers can leverage this flaw to run code in the context of LOCAL SERVICE, provided that authentication is bypassed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://alltena.com/en/resources/release-notes/relnotes-7...
https://www.zerodayinitiative.com/advisories/ZDI-24-1162/

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

JSON
.