CVE-2025-45869: SSRF
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
LogicalDOC Enterpriseto a version that resolves this vulnerability.Fixed in 9.1.1
Event History
Frequently Asked Questions
Which deployments are exposed?
LogicalDOC Enterprise versions up to and including 9.1.1 are affected. The vulnerable component is the ShareFileCallback servlet.
Does exploitation require an account or user interaction?
No. The CVSS vector indicates that exploitation is network-accessible, requires no privileges, and requires no user interaction.
What must an attacker do to exploit the issue?
An attacker must manipulate parameters sent to the ShareFileCallback servlet so that the server makes a request to an attacker-controlled host.
What is the potential impact?
The provided CVSS score is 7.3 (High), with low confidentiality, integrity, and availability impact. Successful exploitation can cause the server to issue attacker-directed requests.