PT-2025-53343 · Logicaldoc · Logicaldoc Enterprise

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25257

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise version 7.7.4

Description The software contains multiple authenticated operating system command execution flaws. These flaws permit attackers to manipulate binary paths when altering system settings. Exploitation involves modifying configuration parameters such as antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2019-25257

Affected Products

Logicaldoc Enterprise

References · 5

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2018-5452.php · Exploit
• 🔥 https://exploit-db.com/exploits/44021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25257 · Security Note
• https://t.me/CVEtracker/40634 · Telegram Post
• https://logicaldoc.com · Note