Unrated severityNVD Advisory· Published Mar 18, 2020· Updated Aug 4, 2024

CVE-2020-10365

Description

LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database.

Affected products

LogicalDoc/LogicalDocdescription
Logicaldoc/Logicaldocllm-fuzzy
Range: <8.3.3

Patches

Vulnerability mechanics

References

www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilitiesmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000