Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:06:32 +0000 CVE-2019-25258 — LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities https://cve.radiocsirt.org/vuln/cve-2019-25258 <p><strong>Affected:</strong> LogicalDOC Srl LogicalDOC Enterprise</p> <p>LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified &#39;suffix&#39; and &#39;fileVersion&#39; parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to access sensitive system files like win.ini and /etc/passwd by manipulating path traversal sequences.</p> <p><strong>Affected:</strong> LogicalDOC Srl LogicalDOC Enterprise</p> <p>LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified &#39;suffix&#39; and &#39;fileVersion&#39; parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to access sensitive system files like win.ini and /etc/passwd by manipulating path traversal sequences.</p> https://cve.radiocsirt.org/vuln/cve-2019-25258