Vendor/product archive

opensagres / xdocreport CVEs

Beta · best-effort

2 CVEs tagged to opensagres / xdocreport — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to opensagres vendor archive

CVE-2025-65482

Published Jan 20, 2026

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2025-64087

Published Jan 20, 2026

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injectin…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1