Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
logicaldoc logicaldoc vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2022-47417
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document file name.
Logicaldoc Logicaldoc 8.8.2
Logicaldoc Logicaldoc 8.7.3
5.4
CVSSv3
CVE-2022-47415
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies).
Logicaldoc Logicaldoc 8.8.2
Logicaldoc Logicaldoc 8.7.3
5.4
CVSSv3
CVE-2022-47418
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.
Logicaldoc Logicaldoc 8.8.2
Logicaldoc Logicaldoc 8.7.3
9.8
CVSSv3
CVE-2020-9423
LogicalDoc prior to 8.3.3 could allow an malicious user to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version con...
Logicaldoc Logicaldoc
6.5
CVSSv3
CVE-2020-10365
LogicalDoc prior to 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated malicious use...
Logicaldoc Logicaldoc
8.8
CVSSv3
CVE-2017-1000021
LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents.
Logicaldoc Logicaldoc
7.1
CVSSv3
CVE-2019-9723
LogicalDOC Community Edition 8.x prior to 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry.
Logicaldoc Logicaldoc
5.4
CVSSv3
CVE-2017-1000023
LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document.
Logicaldoc Logicaldoc
8.8
CVSSv3
CVE-2017-1000022
LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation.
Logicaldoc Logicaldoc
7.5
CVSSv3
CVE-2020-10366
LogicalDoc prior to 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365.
Logicaldoc Logicaldoc
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCP
CVE-2024-4577
CVE-2024-2695
CVE-2024-31870
injection
CVE-2024-3813
arbitrary code
CVE-2024-27801
CVE-2024-30120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »