Security Advisory

CVE-2020-10365

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-18 21:24:09

Last updated 2024-08-04 10:58:40

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database.

← Browse all CVEs View on cve.org ↗