CVE-2019-9723: Logicaldoc

High severity, CVSS 7.1. EPSS: 1.3% chance of exploitation in the next 30 days.

LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry.

Affected products

• Logicaldoc Logicaldoc: from 8.0, before 8.2.1 (fixed in 8.2.1)

Published 2019-05-30. Last modified 2026-06-17.