Opensagres vulnerabilities
We track 2 vulnerabilities in Opensagres products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 20, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Opensagres vulnerabilities
- 9.8 Critical severity
Xdocreport: Improper Restriction of XML External Entity Reference
An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.
- 9.8 Critical severity
Xdocreport: Improper Neutralization of Special Elements Used in a Template Engine
A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.