CVE-2024-54449

The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with ‘read’ and ‘write’ privileges on at least one existing document in the application is required to exploit the vulnerability. Exploitation of this vulnerability would allow an attacker to run commands of their choosing on the underlying operating system of the web server running LogicalDOC.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:logicaldoc:logicaldoc:::::community:::*
	cpe:2.3:a:logicaldoc:logicaldoc:::::enterprise:::*

History

07 Nov 2025, 02:22

Type	Values Removed	Values Added
References	~~() https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html -~~	() https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html - Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
First Time		Logicaldoc logicaldoc Logicaldoc
CPE		cpe:2.3:a:logicaldoc:logicaldoc:::::enterprise:::* cpe:2.3:a:logicaldoc:logicaldoc:::::community:::*

Information

Published : 2025-03-14 18:15

Updated : 2025-11-07 02:22

NVD link : CVE-2024-54449

Mitre link : CVE-2024-54449

CVE.ORG link : CVE-2024-54449

JSON object : View

Products Affected

logicaldoc

logicaldoc

CWE

CWE-23

Relative Path Traversal

{"id": "CVE-2024-54449", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-03-14T18:15:30.757", "references": [{"url": "https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html", "tags": ["Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-23"}]}], "descriptions": [{"lang": "en", "value": "The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with \u2018read\u2019 and \u2018write\u2019 privileges on at least one existing document in the application is required to exploit the vulnerability.\u00a0Exploitation of this vulnerability would allow an attacker to run commands of their choosing on the underlying operating system of the web server running LogicalDOC."}, {"lang": "es", "value": "La API utilizada para interactuar con los documentos de la aplicaci\u00f3n contiene dos endpoints con una vulnerabilidad que permite a un atacante autenticado escribir un archivo con contenido controlado en una ubicaci\u00f3n arbitraria del sistema de archivos subyacente. Esto puede utilizarse para facilitar la ejecuci\u00f3n remota de comandos (RCE). Se requiere una cuenta con privilegios de lectura y escritura en al menos un documento existente en la aplicaci\u00f3n para explotar la vulnerabilidad. Esta vulnerabilidad permitir\u00eda a un atacante ejecutar comandos de su elecci\u00f3n en el sistema operativo subyacente del servidor web que ejecuta LogicalDOC."}], "lastModified": "2025-11-07T02:22:43.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "1C1EAC9D-2C12-4E1D-82F2-FAECA0A8A0F8", "versionEndExcluding": "9.1"}, {"criteria": "cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "CE73C91A-BA24-4040-95BF-75DDA743A43E", "versionEndExcluding": "9.1"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}