CVE-2021-2322

OpenGrok Web App vulnerability CVE-2021-2322 affects OpenGrok versions 1.6.7 and earlier. Root cause per multiple sources is insecure XML deserialization leading to remote code execution and full takeover risk. Affected entries consistently cite CVSS 3.1 base score 8.8 (HIGH) with network access ...

CVE-2025-21572

CVE-2025-21572 affects OpenGrok 1.13.25. The vulnerability is a reflected Cross-Site Scripting (XSS) in the history view page caused by improper handling of path segments, resulting in unsanitized user input being reflected in HTML output. Reported impact per CVSS: MEDIUM (6.1), with network atta...

CVE-2025-30755

CVE-2025-30755 affects OpenGrok 1.14.1. It describes a reflected Cross-Site Scripting (XSS) in the cross reference page due to improper handling of the revision parameter, reflecting unsanitized user input into HTML. CVSS details indicate Network attack, no privileges, user interaction required, ...