https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T23:00:52.741812+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109203 fkie_cve-2026-109203 2026-10-16T23:00:52.744331+00:00

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can enumerate sequential docId values and use the version parameter to retrieve any PDF and its versions from folders they cannot access.

 https://db.gcve.eu/vuln/ghsa-p7xp-ppgx-x3x2 GHSA-p7xp-ppgx-x3x2 2026-10-16T23:00:52.744512+00:00

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can enumerate sequential docId values and use the version parameter to retrieve any PDF and its versions from folders they cannot access.