CVE-2025-64087

A Server-Side Template Injection SSTI vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions...

CVE-2025-64087

creationtimestamp| type| source ---|---|--- 2025-11-23 03:09:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60527 2025-11-23 09:00:06+00:00| published-proof-of-concept| Telegram/XiVibqPdaU-xKxdI2FLNgF4JRC02jDbQsHz1BAzuEAs 2025-11-24 15:00:07+00:00| published-proof-of-concept|...