LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Fri, 31 Jul 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Server‑Side Request Forgery in LogicalDOC Enterprise ShareFileCallback Servlet |
Sat, 25 Jul 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | LogicalDOC Enterprise SSRF via ShareFileCallback Exploitable Without Authentication |
Mon, 20 Jul 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | LogicalDOC Enterprise SSRF via ShareFileCallback Exploitable Without Authentication |
Thu, 16 Jul 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated SSRF in LogicalDOC ShareFileCallback before v9.1.1 |
Tue, 14 Jul 2026 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated SSRF in LogicalDOC ShareFileCallback before v9.1.1 |
Mon, 13 Jul 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-918 | |
| Metrics |
cvssV3_1
|
Mon, 13 Jul 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-07-13T00:00:00.000Z
Updated: 2026-07-13T19:29:41.809Z
Reserved: 2025-04-22T00:00:00.000Z
Link: CVE-2025-45869
Vulnrichment
Updated: 2026-07-13T19:29:37.400Z
NVD
No data.
Redhat
No data.