PT-2023-15295

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is related to a stored cross-site scripting XSS condition in the in-app messaging system, affecting both subject and message bodies. This type...

CVE-2022-47415: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app messaging system both subject and message bodies...

PT-2023-15297

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is a stored cross-site scripting XSS condition, specifically a "Type II" or persistent XSS, that occurs in the document file name. This means...

CVE-2022-47417: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document file name...

PT-2019-19821

Name of the Vulnerable Software and Affected Versions LogicalDOC Community Edition versions 8.0 through 8.2.0 Description The issue allows for path traversal, enabling the reading of arbitrary files and the creation of directories. This is due to a vulnerability in the PluginRegistry class...

CVE-2019-9723: Improper Limitation of a Pathname to a Restricted Directory

LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry...

LogicalDoc Community Edition XXE Vulnerability

LogicalDoc CommunityEdition is a document management system developed using Java technology . The system has Lucene full-text search index and automatic import and other functions . An XML injection vulnerability exists in LogicalDoc CommunityEdition 7.5.3 and earlier versions. No details of the...

CVE-2017-1000022

LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation...

CVE-2017-1000023

LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document...

Hardcoded credentials

LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document...

CVE-2017-1000021: Improper Restriction of XML External Entity Reference

LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents...

CVE-2017-1000023: Improper Neutralization of Input During Web Page Generation

LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document...

CVE-2017-1000022: Incorrect Permission Assignment for Critical Resource

LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation...

PT-2017-10733

Name of the Vulnerable Software and Affected Versions LogicalDoc Community Edition versions 7.5.3 and prior Description The issue allows for an XSS attack when the preview function is used on HTML documents. Recommendations For versions 7.5.3 and prior, update to a version that contains a fix for...

PT-2017-10731

Name of the Vulnerable Software and Affected Versions LogicalDoc Community Edition versions prior to 7.5.3 Description The issue allows for XXE XML External Entity attacks when indexing XML documents. Recommendations For versions prior to 7.5.3, update to a version that contains a fix for this...

PT-2017-10732

Name of the Vulnerable Software and Affected Versions LogicalDoc Community Edition versions 7.5.3 and prior Description The issue is related to incorrect access control, which could lead to privilege escalation. Recommendations For versions 7.5.3 and prior, update to a version that contains a fix...