CVE-2025-12547: LogicalDOC Community Edition Admin Login login.jsp excessive authentication
A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12547?
CVE-2025-12547 has been classified with a moderate severity due to the potential for excessive authentication attempts.
How do I fix CVE-2025-12547?
To mitigate CVE-2025-12547, update LogicalDOC Community Edition to version 9.2.2 or later.
What systems are affected by CVE-2025-12547?
CVE-2025-12547 affects LogicalDOC Community Edition up to version 9.2.1.
What type of vulnerability is CVE-2025-12547?
CVE-2025-12547 is an authentication-related vulnerability that allows manipulation of login attempts.
Can CVE-2025-12547 lead to account takeover?
Yes, CVE-2025-12547 could potentially allow malicious users to exploit excessive authentication attempts leading to account compromise.