A vulnerability, which was classified as critical, has been found in LogicalDOC Enterprise up to 7.7.4. This affects an unknown part of the file /thumbnail. This manipulation of the argument suffix/fileVersion causes path traversal.

This vulnerability is registered as CVE-2019-25258. Remote exploitation of the attack is possible. Furthermore, an exploit is available.