The flaw resides in the exportReport method of Allegra, where a supplied file path is used without proper validation, enabling a directory traversal attack. An authenticated attacker can trigger the service to read arbitrary files, exposing sensitive data in the context of the service account. The weakness is classified as CWE‑22, a classic path traversal vulnerability resulting in unauthorized access to confidential information.

The vulnerability affects the Allegra system. No specific version ranges are provided, so all installations of Allegra are potentially impacted until the fix is applied.

The CVSS score of 6.5 indicates a moderate severity. The EPSS score is not available, and the issue is not listed in CISA’s KEV catalog, which suggests it is not currently being widely exploited. The attack requires valid authentication; therefore, the exposed data can only be read by users or processes with authorized access. The vulnerability permits remote exploitation, as the exportReport functionality can be invoked over the network.