fr.opensagres.xdocreport:fr.opensagres.xdocreport.document.tools (1.0.6), hu.blackbelt.bundles.xdocreport:fr.opensagres.xdocreport (1.0.6-1) +4 more potentially affected by CVE-2025-64087 via fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker (1.0.6)

fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker and may be impacted: -...

fr.opensagres.xdocreport:fr.opensagres.xdocreport.document.tools (1.0.1) potentially affected by CVE-2025-64087 via fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker (1.0.1)

fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker and may be impacted: -...

com.github.livesense:org.livesense.framework.xdocreport (>=1.0.4, <=1.0.5), fr.opensagres.xdocreport:fr.opensagres.xdocreport.document.tools (1.0.4) potentially affected by CVE-2025-64087 via fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker (1.0.4)

fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker and may be impacted: -...

fr.opensagres.xdocreport:fr.opensagres.xdocreport.document.tools (1.0.5) potentially affected by CVE-2025-64087 via fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker (1.0.5)

fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker and may be impacted: -...

CVE-2025-64087

A Server-Side Template Injection SSTI vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions...

CVE-2025-64087

creationtimestamp| type| source ---|---|--- 2025-11-23 03:09:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60527 2025-11-23 09:00:06+00:00| published-proof-of-concept| Telegram/XiVibqPdaU-xKxdI2FLNgF4JRC02jDbQsHz1BAzuEAs 2025-11-24 15:00:07+00:00| published-proof-of-concept|...