UNKNOWN NVD

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name.

References

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-45871
https://www.logicaldoc.com/

Published: 2026-10-06 · Source: NVD · Feed updated: 2026-10-06

This unknown severity vulnerability was published on 2026-10-06 via NVD.

vulnfeed aggregates 9512 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.