Threats tagged 'ghsa-3h4h-g6p9-v72m'

A vulnerability in the document interaction API of LogicalDOC allows an authenticated attacker with read and write privileges on at least one document to write files with controlled content to arbitrary locations on the server's file system. This flaw can be leveraged to achieve remote code execution (RCE) on the underlying operating system hosting the LogicalDOC web server.