LogicalDOC / Logicaldoc Enterprise
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-12245 | Blind SQL Injection in Logout | HIGH | 8.7 | Mar 14, 2025 |
| CVE-2024-12020 | Reflected Cross-Site Scripting (XSS) | MEDIUM | 6.4 | Mar 14, 2025 |
| CVE-2024-12019 | Arbitrary File Read via Document API | HIGH | 7.1 | Mar 14, 2025 |
| CVE-2024-54449 | Remote Code Execution (RCE) via Arbitrary File Write In Document API | HIGH | 8.7 | Mar 14, 2025 |
| CVE-2024-54448 | Remote Code Execution (RCE) via Automation Scripting | HIGH | 8.6 | Mar 14, 2025 |
| CVE-2024-54447 | Blind SQLi in Saved Search | HIGH | 7.1 | Mar 14, 2025 |
| CVE-2024-54446 | Blind SQLi in Document History | HIGH | 7.1 | Mar 14, 2025 |
| CVE-2024-54445 | Blind SQLi in Login | HIGH | 8.7 | Mar 14, 2025 |
| CVE-2022-47418 | LogicalDOC Document Version Comment Stored XSS | MEDIUM | 5.4 | Feb 7, 2023 |
| CVE-2022-47417 | LogicalDOC Document File Name Stored XSS | MEDIUM | 5.4 | Feb 7, 2023 |
| CVE-2022-47416 | LogicalDOC Chat Stored XSS | MEDIUM | 5.4 | Feb 7, 2023 |
| CVE-2022-47415 | LogicalDOC Messaging Stored XSS | MEDIUM | 5.4 | Feb 7, 2023 |
Showing 1 to 12 of 12 CVEs