CVE-2025-45868

Description

LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to blind SQL injection in the ComparisonServlet component, allowing authenticated user to manipulate SQL queries via crafted input.

References

• https://github.com/netero1010/Vulnerability-Disclosure/blob/main/CVE-2025-45868/README.md
• https://www.logicaldoc.com/