LogicalDoc Community Edition vulnerabilities

3 known CVE vulnerabilities in LogicalDoc Community Edition, translated and rated.

CVE-2017-1000022High
LogicalDoc Community Edition 7.5.3 and prior contain an incorrect access control which could lead to privilege escalation.
CVE-2017-1000021High
LogicalDoc Community Edition version 7.5.3 and prior is vulnerable to XXE when indexing XML documents.
CVE-2025-12546Low
LogicalDOC Community Edition up to 9.2.1 has a cross-site scripting (XSS) vulnerability in the API Key creation UI. The attack can be performed remotely, and the exploit has been publicly disclosed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS