Description (CNA)
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.logicaldoc.com/
- https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-45871
ADP enrichment
No English description supplied.
No references supplied.