Logicaldoc
Approved changes feed: RSS · Atom
cpe:2.3:a:logicaldoc:logicaldoc:7.5.1:*:*:*:*:*:*:*
part: a version: 7.5.1 update: *
| Vendor | Logicaldoc (99ada430-3eaa-506f-a9ea-0ed1b7c980bc) |
|---|---|
| Product | Logicaldoc (0f5c8c86-f3cf-56d5-bb0a-23477ee51d54) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25258 |
vulnerable | 2026-06-08 05:13:42.139451 |
LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
HIGH (7.5)
LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified 'suffix' and 'fileVersion' parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to access sensitive system files like win.ini and /etc/passwd by manipulating path traversal sequences.
Published: 2025-12-24T19:28:06.519Z
Updated: 2026-03-05T12:02:20.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25257 |
vulnerable | 2026-06-08 05:13:42.138961 |
LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
MEDIUM (6.5)
LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.
Published: 2025-12-24T19:28:06.119Z
Updated: 2026-03-05T12:02:20.000Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.