Medium severity6.5NVD Advisory· Published Oct 12, 2026
CVE-2026-109169
CVE-2026-109169
Description
LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataServlet. Low-privileged attackers can inject UNION SELECT statements returned in the XML tag list to read usernames, email addresses and password hashes from ld_user.
Affected products
1- Range: <=9.3
Patches
Vulnerability mechanics
References
4- github.com/logicaldoc/community/blob/9.3/logicaldoc-core/src/main/java/com/logicaldoc/core/document/HibernateDocumentDAO.javanvd
- github.com/logicaldoc/community/blob/9.3/logicaldoc-webapp/src/main/java/com/logicaldoc/web/data/TagsDataServlet.javanvd
- github.com/logicaldoc/community/commit/8428bfb93f89ab5773019299d17d643c075c4aeenvd
- www.vulncheck.com/advisories/logicaldoc-community-edition-through-9.3-sql-injection-via-tags-xml-firstletternvd
News mentions
0No linked articles in our index yet.