The vulnerability manifests as a blind SQL injection flaw in the WorkflowsDataServlet component of LogicalDOC Enterprise, allowing an authenticated user to alter SQL queries by supplying a specially crafted workflow template name. This flaw can lead to unauthorized data access or modification in the underlying database, potentially exposing sensitive documents or corrupting data integrity.

Affected systems are all LogicalDOC Enterprise installations up through version 9.1.1. The flaw is not present in later releases that have addressed the issue.

The CVSS score is 8.1, the EPSS score is <1%, and the vulnerability is not listed in KEV. The required precondition is that the attacker possesses valid authentication to the application. The injection path likely requires access via the web interface and sending a malicious workflow template name in a request to WorkflowsDataServlet. Without a publicly disclosed patch, organizations should treat the vulnerability as high risk if they run a vulnerable version.