CyberRota Analysis
AI-GeneratedLogicalDOC Enterprise versions prior to 9.1.1 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability, allowing unauthenticated attackers to manipulate the ShareFileCallback servlet and initiate requests to malicious servers. This could lead to unauthorized access to sensitive internal resources or data leakage. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.