PatchSiren

LogicalDOC CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH LogicalDOC CVE published 2026-07-13

CVE-2025-45869

LogicalDOC Enterprise version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host. This vulnerability has a high CVSS score of 7.3, indicating a high severity. Users of LogicalDOC Enterprise version up to and before [truncated]