Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx8r-jj29-vw5j

Опубликовано: 24 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 6.5

Описание

LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.

LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.

EPSS

Процентиль: 19%
0.0006
Низкий

8.7 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 месяца назад

LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.

EPSS

Процентиль: 19%
0.0006
Низкий

8.7 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-426