https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 21:26:56 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109204 <p>LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to reset victims&#39; passwords, lock them out, and reveal their email addresses.</p> <p>LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to reset victims&#39; passwords, lock them out, and reveal their email addresses.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109204 https://db.gcve.eu/vuln/ghsa-75r5-9xr9-27w7 <p>LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to reset victims&#39; passwords, lock them out, and reveal their email addresses.</p> <p>LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to reset victims&#39; passwords, lock them out, and reveal their email addresses.</p> https://db.gcve.eu/vuln/ghsa-75r5-9xr9-27w7