Maven package
fr.opensagres.xdocreport/fr.opensagres.xdocreport.template.freemarker
pkg:maven/fr.opensagres.xdocreport/fr.opensagres.xdocreport.template.freemarker
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-64087 | Cri | 9.8 | < 2.2.0 | 2.2.0 | Jan 20, 2026 | A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions. |
- affected < 2.2.0fixed 2.2.0
A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.