Advisories · Technology

LogicalDOC Community.

Every CVE that names LogicalDOC Community among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-12245 CVE record

CVSS 8.7 High

Blind SQL Injection in Logout
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
Not analysed yet 14 Mar 2025
CVE-2024-12019 CVE record

CVSS 7.1 High

Arbitrary File Read via Document API
- LogicalDOC Community
- LogicalDOC Enterprise
- Path traversal
Not analysed yet 14 Mar 2025
CVE-2024-54449 CVE record

CVSS 8.7 High

Remote Code Execution (RCE) via Arbitrary File Write In Document API
- LogicalDOC Community
- LogicalDOC Enterprise
- Path traversal
Not analysed yet 14 Mar 2025
CVE-2024-54448 CVE record

CVSS 8.6 High

Remote Code Execution (RCE) via Automation Scripting
- LogicalDOC Community
- LogicalDOC Enterprise
- Code injection
Not analysed yet 14 Mar 2025
CVE-2024-54447 CVE record

CVSS 7.1 High

Blind SQLi in Saved Search
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
Not analysed yet 14 Mar 2025
CVE-2024-54446 CVE record

CVSS 7.1 High

Blind SQLi in Document History
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
Not analysed yet 14 Mar 2025
CVE-2024-54445 CVE record

CVSS 8.7 High

Blind SQLi in Login
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
Not analysed yet 14 Mar 2025