Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

LogicalDOC Community Edition — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in LogicalDOC Community Edition, with AI-generated Chinese analysis, references, and POCs.

Vendor: LogicalDOC

CVE ID Title CVSS Severity Published
CVE-2026-109206 LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet CWE-204 5.3 Medium 2026-10-12
CVE-2026-109205 LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet CWE-770 7.5 High 2026-10-12
CVE-2026-109204 LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket CWE-640 6.3 Medium 2026-10-12
CVE-2026-109202 LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet CWE-862 6.5 Medium 2026-10-12
CVE-2026-109203 LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet CWE-862 6.5 Medium 2026-10-12
CVE-2026-109201 LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService CWE-862 8.3 High 2026-10-12
CVE-2026-109199 LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template CWE-94 8.8 High 2026-10-12
CVE-2026-109200 LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href CWE-918 6.4 Medium 2026-10-12
CVE-2026-109170 LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter CWE-89 6.5 Medium 2026-10-12
CVE-2026-109169 LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter CWE-89 6.5 Medium 2026-10-12

All 10 known CVE vulnerabilities affecting LogicalDOC Community Edition with full Chinese analysis, references, and POCs where available.