Is CVE-2025-45869 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-45869?

CVE-2025-45869 has a CVSS v3 severity of HIGH (7.3).

Back

CVE-2025-45869

Description

LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host.