The vulnerability is an HQL injection flaw in the DocumentsDataServlet that allows an authenticated user to supply an unvalidated "indexed" parameter. Manipulating this parameter injects boolean HQL expressions into the backend query, enabling the attacker to retrieve document metadata and raw database rows that would normally be protected. The weakness, classified as CWE‑89, permits disclosure of sensitive information and can be used to maneuver queries beyond the intended folder scope.

LogicalDOC Community Edition versions up to and including 9.3 are affected. Users who possess read access to any folder can exploit the flaw by sending a crafted request to the DocumentsDataServlet, thereby accessing data from restricted folders and the underlying database.

The CVSS score of 7.1 indicates high severity. No EPSS score is available, so the exploitation likelihood cannot be quantified precisely. The vulnerability is not listed in the CISA KEV catalog. Attackers must be authenticated with at least folder‑read rights, but once the injection is achieved they can bypass all scope and permission checks, potentially exposing a large portion of the system’s data. The combination of high impact and the ability to use the flaw after gaining legitimate access results in a significant risk to confidentiality and integrity.