CVE-2025-45870 | LogicalDOC up to 9.1.1 OnlyOfficeEditor Servlet fileExt path traversal

July 16, 2026 Yanac

A vulnerability, which was classified as problematic, was found in LogicalDOC up to 9.1.1. This issue affects some unknown processing of the component OnlyOfficeEditor Servlet. Executing a manipulation of the argument fileExt can lead to path traversal.

This vulnerability is registered as CVE-2025-45870. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More