CVE-2025-45869

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-45869
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/netero1010/Vulnerability-Disclosure/blob/main/CVE-2025-45869/README.md
https://www.logicaldoc.com/
Configurations

No configuration.

History

13 Oct 2026, 09:10

Type Values Removed Values Added
Summary
  • (es) La Versión LogicalDOC Enterprise hasta e incluyendo la v9.1.1 es vulnerable a la falsificación de petición del lado del servidor (SSRF). Un atacante no autenticado puede explotar el servlet ShareFileCallback manipulando los parámetros de entrada para desencadenar una petición del lado del servidor a un host controlado por el atacante.
Information

Published : 2026-07-13 19:16

Updated : 2026-10-13 09:10

NVD link : CVE-2025-45869

Mitre link : CVE-2025-45869

CVE.ORG link : CVE-2025-45869

JSON object : View

Products Affected

No product.

CWE
CWE-918

Server-Side Request Forgery (SSRF)