CVE-2025-45871
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
LogicalDOC Enterprise up to and including 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing an authenticated user to manipulate SQL queries via a crafted workflow template name.
Risk Assessment
Risk of unauthorized access, modification, or deletion of data in the database, which may lead to confidentiality and integrity breaches and potentially to system compromise.
Recommendation
It is recommended to upgrade LogicalDOC Enterprise to a version newer than 9.1.1 and implement input validation and prepared SQL statements to prevent injection attacks.
Other vulnerabilities in LogicalDOC Enterprise
See all- CVE-2025-45870Medium
Local File Inclusion (LFI) vulnerability in LogicalDOC Enterprise up to and including version 9.1.1, present in the OnlyOfficeEditor servlet. Allows an authenticated user to exploit a path traversal flaw in the fileExt parameter to read files outside allowed directories.
- CVE-2025-45868High
A vulnerability in LogicalDOC Enterprise up to version 9.1.1 allows an authenticated attacker to perform blind SQL injection in the ComparisonServlet component. Crafted input can be used to manipulate SQL queries.
- CVE-2025-45869High
LogicalDOC Enterprise versions up to 9.1.1 are vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.
Original NVD description (English source)
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS