PT-2025-44663 · Logicaldoc · Logicaldoc Community Edition

Zeeshan Khan · Published 2025-10-31 · Updated 2025-11-07 · CVE-2025-12547

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LogicalDOC Community Edition versions up to 9.2.1

Description A flaw exists in LogicalDOC Community Edition that relates to improper restriction of excessive authentication attempts. This issue affects the Admin Login Page component, specifically within the /login.jsp file. The attack can be carried out remotely and is considered to have high complexity, with difficult exploitability. The exploit is publicly available.

Recommendations Versions prior to 9.2.1 should be updated.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-799

Related Identifiers

CVE-2025-12547

Affected Products

Logicaldoc Community Edition

References · 9

• 🔥 https://gist.github.com/thezeekhan/869aeb01bd981667c35dcac3e72c2bfa · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12547 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12547 · Vendor Advisory
• https://t.me/CVEtracker/36337 · Telegram Post
• https://vuldb.com/?ctiid.330807 · Note
• https://twitter.com/CVEnew/status/1984337727329026140 · Twitter Post
• https://t.me/cveNotify/142040 · Telegram Post
• https://vuldb.com/?id.330807 · Note
• https://vuldb.com/?submit.677172 · Note