What is CVE-2024-54448?

CVE-2024-54448 is a high-severity vulnerability in Logicaldoc, classified under Code Injection. CVSS score: 7.2/10. Published 2025-03-14.

How severe is CVE-2024-54448?

High severity. CVSS v3 base score is 7.2 out of 10.

Is CVE-2024-54448 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Logicaldoc

CVE-2024-54448

The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the underlying operating system. An account with administrator privileges or that has been explicitly granted access to use Automation…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.005 (37.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

gg0h/gg0h

References

disclosure@synopsys.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-54448?: CVE-2024-54448 is a high-severity vulnerability in Logicaldoc, classified under Code Injection. CVSS score: 7.2/10. Published 2025-03-14.
How severe is CVE-2024-54448?: High severity. CVSS v3 base score is 7.2 out of 10.
Is CVE-2024-54448 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.