CVE-2024-54449

CVE-2024-54449 is a critical arbitrary file write vulnerability affecting LogicalDOC, allowing an authenticated attacker with read and write privileges on a document to write files with controlled content to any location on the server's file system. This flaw, rated 8.8 HIGH on CVSS, can lead to Remote Code Execution (RCE) on the underlying operating system. While the vulnerability is severe and easily exploitable with low attack complexity, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.