high7.3
CVE-2025-45869
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF).
Impact
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| LogicalDOC | LogicalDOC Enterprise Version Up To And | before 9.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.