CVE-2025-45871

Summary

LogicalDOC Enterprise contains a blind SQL injection vulnerability in its WorkflowsDataServlet component that allows authenticated users to manipulate underlying SQL queries through crafted workflow template names, potentially leading to unauthorized data access and manipulation.

Exploitability

Exploitation requires an authenticated user account with workflow creation privileges, but is relatively straightforward once achieved as it leverages the existing workflow template name parameter without requiring complex payloads or additional attack vectors.

Blast radius

If exploited, this vulnerability could allow attackers to extract sensitive database information including user credentials, document metadata, and potentially gain access to other system data through SQL injection techniques.

Detection

Monitor for unusual workflow template name parameters in servlet request logs, particularly those containing SQL injection patterns such as 'OR 1=1--' or similar blind SQL injection payloads that would not normally appear in legitimate workflow naming conventions.

Prioritized remediation

Upgrade to LogicalDOC Enterprise version 9.1.2 or later to remediate this blind SQL injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.