File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality…CVE-2020-9423Logicaldoc · 5.0% likely

   CWE-434

2. LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365.CVE-2020-10366Logicaldoc · 1.5% likely

   CWE-22

3. LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry.CVE-2019-9723Logicaldoc · 1.3% likely

   CWE-22

4. LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal VulnerabilitiesCVE-2019-25258LogicalDOC Srl · CVSS 7.5 · 1.1% likely

   CWE-22

5. Remote Code Execution (RCE) via Arbitrary File Write In Document APICVE-2024-54449LogicalDOC · CVSS 8.7 · 0.6% likely

   CWE-23

6. Arbitrary File Read via Document APICVE-2024-12019LogicalDOC · CVSS 7.1 · 0.5% likely

   CWE-23

7. LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path ManipulationCVE-2019-25257LogicalDOC Srl · CVSS 6.5 · 0.4% likely

   CWE-426

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.