CVE-2025-45871

HIGHCVSS 8.1

Description

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name.

Timeline

Published:October 6th, 2026 6:16 PM

Last modified:October 14th, 2026 1:10 PM

CVSS Scoring

CVSS v3: 8.1 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-89

References & Reports

Advisories, patches, and third-party reports

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-45871
https://www.logicaldoc.com/

Source: NIST NVD · Data may lag official sources by up to one minute