CVE-2019-25258 | LogicalDOC Enterprise up to 7.7.4 /thumbnail suffix/fileVersion path traversal (Exploit 44019 / EDB-44019)

Uncategorized
Yanac

A vulnerability, which was classified as critical, has been found in LogicalDOC Enterprise up to 7.7.4. This affects an unknown part of the file /thumbnail. This manipulation of the argument suffix/fileVersion causes path traversal.

This vulnerability is registered as CVE-2019-25258. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More