CVE-2019-25257

🗓️ 24 Dec 2025 19:28:06Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 5 Views🌐 WEB

Authenticated command execution in LogicalDOC Enterprise 7.7.4 by manipulating binary paths in configuration settings.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-25257	24 Dec 202521:38	–	circl
CNNVD	LogicalDOC Enterprise 安全漏洞	24 Dec 202500:00	–	cnnvd
Cvelist	CVE-2019-25257 LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation	24 Dec 202519:28	–	cvelist
EUVD	EUVD-2025-205293	24 Dec 202521:30	–	euvd
NVD	CVE-2019-25257	24 Dec 202520:15	–	nvd
Positive Technologies	PT-2025-53343	24 Dec 202500:00	–	ptsecurity
Vulnrichment	CVE-2019-25257 LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation	24 Dec 202519:28	–	vulnrichment
Zero Science Lab	LogicalDOC Enterprise 7.7.4 Post-Auth Command Execution Via Binary Path Manipulation	11 Feb 201800:00	–	zeroscience

Vulners

CNA

Node

logicaldoc_srl logicaldoc_enterpriseMatch7.7.4

logicaldoc_srl logicaldoc_enterpriseMatch7.7.3

logicaldoc_srl logicaldoc_enterpriseMatch7.7.2

logicaldoc_srl logicaldoc_enterpriseMatch7.7.1

logicaldoc_srl logicaldoc_enterpriseMatch7.6.4

logicaldoc_srl logicaldoc_enterpriseMatch7.6.2

logicaldoc_srl logicaldoc_enterpriseMatch7.5.1

logicaldoc_srl logicaldoc_enterpriseMatch7.4.2

logicaldoc_srl logicaldoc_enterpriseMatch7.1.1

[
  {
    "vendor": "LogicalDOC Srl",
    "product": "LogicalDOC Enterprise",
    "versions": [
      {
        "version": "7.7.4",
        "status": "affected"
      },
      {
        "version": "7.7.3",
        "status": "affected"
      },
      {
        "version": "7.7.2",
        "status": "affected"
      },
      {
        "version": "7.7.1",
        "status": "affected"
      },
      {
        "version": "7.6.4",
        "status": "affected"
      },
      {
        "version": "7.6.2",
        "status": "affected"
      },
      {
        "version": "7.5.1",
        "status": "affected"
      },
      {
        "version": "7.4.2",
        "status": "affected"
      },
      {
        "version": "7.1.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5452.php
logicaldoc	www.logicaldoc.com/
exploit-db	www.exploit-db.com/exploits/44021

Parameter	Position	Path	Description	CWE
default.antivirus.includes	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
default.antivirus.enabled	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
antivirus.command	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
default.antivirus.timeout	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
ocr.Tesseract.path	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
default.ocr.includes	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
webservice.enabled	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
command.convert	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
command.gs	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426
command.openssl	request body	/frontend/setting	Authenticated OS command execution via binary path manipulation in settings when saving configuration.	CWE-426

15 Apr 2026 00:35Current

7.6High risk

Vulners AI Score7.6

CVSS 3.16.5

CVSS 48.7

EPSS0.00097

SSVC

CWE-426