Description
LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate queries via the unvalidated indexed parameter. Attackers with read access to any folder can inject boolean HQL expressions to bypass folder scope and read-permission checks, listing restricted document metadata and extracting database contents.
Published: 2026-10-12
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 12 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
Description LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate queries via the unvalidated indexed parameter. Attackers with read access to any folder can inject boolean HQL expressions to bypass folder scope and read-permission checks, listing restricted document metadata and extracting database contents.
Title LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
First Time appeared Logicaldoc
Logicaldoc logicaldoc
Weaknesses CWE-89
CPEs cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:community:*:*:*
Vendors & Products Logicaldoc
Logicaldoc logicaldoc
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Logicaldoc Logicaldoc
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-12T13:39:41.904Z

Reserved: 2026-10-12T12:41:07.240Z

Link: CVE-2026-109170

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-12T14:17:10.223

Modified: 2026-10-12T14:17:10.223

Link: CVE-2026-109170

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')