CVE-2025-65482
1 advisory.
Maven/fr.opensagres.xdocreport:fr.opensagres.xdocreport.document CVE-2025-65482: critical 9.8, EPSS 0.57%
XDocReport affected by an XML External Entity (XXE) vulnerability
Action: Upgrade fr.opensagres.xdocreport:fr.opensagres.xdocreport.document to 2.0.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.2 | 2.0.4 | - |
Fixed versions
| 2.0.4 |
Sources
- osv: GHSA-7jc7-g598-2p64
- https://nvd.nist.gov/vuln/detail/CVE-2025-65482
- https://github.com/opensagres/xdocreport/commit/d9b90ae6c9489dc43f6427ec7b315cab34125332
- https://drive.google.com/drive/folders/1hUyCznpBN7ivo5krmyJ4OQc_q626Hy5q?usp=sharing
- https://github.com/AT190510-Cuong/CVE-2025-65482-XXE-
- https://github.com/opensagres/xdocreport
- https://hackmd.io/@cuongnh/r1B7B8fJ-g
- https://hackmd.io/@cuongnh/rkJPCgSy-l
CVE-2025-65482 · published · modified · JSON