CVE-2019-25258 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverifie…
High CVSS: 7.1

CVE-2019-25258

LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified 'suffix' and 'fileVersion' parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to access sensitive system files like win.ini and /etc/passwd by manipulating path traversal sequences.
Vendor
Logicaldoc
Product
Logicaldoc
CWE
CWE-22
Yayın Tarihi
2025-12-24 20:15:54
Güncelleme
2026-01-09 20:50:45
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-22 Logicaldoc HIGH Logicaldoc 2025

Referanslar

https://www.exploit-db.com/exploits/44019 https://www.logicaldoc.com https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5450.php https://www.exploit-db.com/exploits/44019 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5450.php