writeups.xyz / LogicalDOC Vulnerability Disclosure

Submitter : c2a

Date: 23 February 2023

Bounty : undisclosed

Vulnerabilities :

• XXE
• RCE
• Command Injection
• Privilege Escalation

Programs :

• LogicalDOC

Authors :

• Brett DeWall (@Xbadbiddyx)
• Michael Rand

Link :
https://www.whiteoaksecurity.com/blog/logicaldoc-vulnerability-disclosure/