CVE-2026-109206mediumCWE-204

CVE-2026-109206: fallo de gravedad media en LogicalDOC Community Edition

LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear LogicalDOC Community Edition

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.2%
LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts because the AvatarServlet (/avatar) performs no session validation. Attackers can supply usernames or numeric IDs in the userId parameter and compare 1x1 transparent images against real avatars to enumerate users and retrieve profile pictures.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
LogicalDOC · LogicalDOC Community Edition
CVEs relacionadas — LogicalDOC Community Edition

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-47418MEDIUMLogicalDOC Document Version Comment Stored XSSEPSS 0.5%CVE-2022-47417MEDIUMLogicalDOC Document File Name Stored XSSEPSS 0.5%CVE-2022-47415MEDIUMLogicalDOC Messaging Stored XSSEPSS 0.5%CVE-2026-109205HIGHLogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServletEPSS 0.4%CVE-2026-109199HIGHLogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail TemplateEPSS 0.4%CVE-2026-109170HIGHLogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed ParameterEPSS 0.3%