LogicalDOC Community Edition vulnerabilities
3 known vulnerabilities in LogicalDOC Community Edition from LogicalDOC. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
LogicalDOC Community Edition: Allocation of Resources Without Limits or Throttling
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file part
- 8.3 High severity
LogicalDOC Community Edition: Missing Authorization
LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, rei
- 8.8 High severity
LogicalDOC Community Edition: Improper Control of Generation of Code
LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields. Attackers can invoke SystemTool e