Skip to content
OpenAdvisories

Product · LogicalDOC

LogicalDOC Community Edition

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-109205

    LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet

    LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file par…

    LogicalDOC LogicalDOC Community Edition
  • High 8.3
    CVE-2026-109201

    LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService

    LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, re…

    LogicalDOC LogicalDOC Community Edition
  • High 8.8
    CVE-2026-109199

    LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template

    LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields. Attackers can invoke SystemTool …

    LogicalDOC LogicalDOC Community Edition