PatchSiren cyber security CVE debrief
CVE-2025-45869 LogicalDOC CVE debrief
LogicalDOC Enterprise version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host. This vulnerability has a high CVSS score of 7.3, indicating a high severity. Users of LogicalDOC Enterprise version up to and before v9.1.1 should apply the necessary patches to prevent Server-Side Request Forgery (SSRF) attacks. The vulnerability allows an attacker to manipulate input parameters and trigger a server-side request to an attacker-controlled host.
- Vendor
- LogicalDOC
- Product
- LogicalDOC Enterprise
- CVSS
- HIGH 7.3
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-13
- Original CVE updated
- 2026-07-13
- Advisory published
- 2026-07-13
- Advisory updated
- 2026-07-13
Who should care
Users of LogicalDOC Enterprise version up to and before v9.1.1 should apply the necessary patches to prevent Server-Side Request Forgery (SSRF) attacks. This includes administrators, security teams, and operators who manage LogicalDOC Enterprise deployments. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
Technical summary
The vulnerability exists in the ShareFileCallback servlet of LogicalDOC Enterprise, allowing an unauthenticated attacker to manipulate input parameters and trigger a server-side request to an attacker-controlled host. This is a Server-Side Request Forgery (SSRF) vulnerability. The vulnerability has a high CVSS score of 7.3, indicating a high severity. Users of LogicalDOC Enterprise version up to and before v9.1.1 should apply the necessary patches to prevent Server-Side Request Forgery (SSRF) attacks.
Defensive priority
High priority due to the high CVSS score of 7.3 and the potential for SSRF attacks. Defenders should verify affected product deployments and scope, and review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
Recommended defensive actions
- Apply the necessary patches to LogicalDOC Enterprise version up to and before v9.1.1
- Restrict access to the ShareFileCallback servlet
- Monitor server-side requests for suspicious activity
- Implement additional security measures to prevent SSRF attacks
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
Evidence notes
The CVE record was published on 2026-07-13T19:16:36.360Z and was last modified on 2026-07-13T20:37:48.157Z. The NVD entry is currently Deferred. Evidence is limited, and defenders should verify affected product deployments and scope. The vulnerability exists in LogicalDOC Enterprise version up to and before v9.1.1, and an unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-13T19:16:36.360Z and has not been modified since then. The NVD entry is currently Deferred.