Opensagres Xdocreport vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Opensagres Xdocreport: 2 record(s), with affected versions and fixes.
cpe:2.3:a:opensagres:xdocreport

CVE-2025-65482 Critical · 9.8 CWE-611 Jan 20, 2026

XML External Entity (XXE) in Opensagres Xdocreport

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

CVE-2025-64087 Critical · 9.8 CWE-1336 Jan 20, 2026

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of…

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.