Skip to content
Heist/ feed
Medium

LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket

Type: advisorySource: Official CVE List1 source record

LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to reset victims' passwords, lock them out, and reveal their email addresses.

Announced Source revision 1
Original source ↗

CVE-2026-109204

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-109204

LogicalDOC Community Edition

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://github.com/logicaldoc/community",
    "vendor": "LogicalDOC",
    "product": "LogicalDOC Community Edition",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "9.3"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2026-109204

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#34673 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement