← Back

CVE-2025-65482

nvd nist
Published: Jan 20, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

Affected (1)

Opensagres
1 product
Xdocreport
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Xdocreport
From 0.9.2 to 2.0.3

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (5)

Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Product
Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Permissions Required

Timeline

No history available yet.