GCVE - cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Logicaldoc (`99ada430-3eaa-506f-a9ea-0ed1b7c980bc`)
Product	Logicaldoc (`0f5c8c86-f3cf-56d5-bb0a-23477ee51d54`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/logicaldoc/logicaldoc`	purl2cpe	2026-06-01 10:15:31.633219
`pkg:github/wodin/logicaldoc`	purl2cpe	2026-06-01 10:15:31.633222
`pkg:sourceforge/logicaldoc`	purl2cpe	2026-06-01 10:15:31.633225

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-9423`	vulnerable	2026-06-08 05:28:01.698691	Details available LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version control, shared among users, applying tags, etc. This functionality could be abused by an unauthenticated attacker to upload an arbitrary file in a restricted folder. This would lead to the executions of malicious commands with root privileges. Published: 2020-03-18T21:04:55.000Z Updated: 2024-08-04T10:26:16.250Z Open on db.gcve.eu Reference links https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10366`	vulnerable	2026-06-08 05:16:35.148094	Details available LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365. Published: 2020-04-07T23:58:00.000Z Updated: 2024-08-04T10:58:40.540Z Open on db.gcve.eu Reference links https://sourceforge.net/p/logicaldoc/code/HEAD/tree/community/logicaldoc/trunk/ReleaseNotes.txt https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10365`	vulnerable	2026-06-08 05:16:35.147702	Details available LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database. Published: 2020-03-18T21:24:09.000Z Updated: 2024-08-04T10:58:40.346Z Open on db.gcve.eu Reference links https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.