CVE-2025-45869

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise versions prior to 9.1.1

Description An unauthenticated attacker can perform a Server-Side Request Forgery (SSRF), which occurs when a server is tricked into making requests to an unintended destination. The issue exists in the 'ShareFileCallback' servlet, where manipulating input parameters allows the attacker to trigger a server-side request to a host under their control.

Recommendations Update LogicalDOC Enterprise to version 9.1.1 or later.