Most recent entries from all

EUVD-2026-260027

2026-10-06T03:00:32.742839+00:00

EUVD-2026-260027

fkie_cve-2025-54656

2026-10-06T03:00:32.742878+00:00

** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.

This issue affects Apache Struts Extras: before 2.

When using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead to log output where part of the message masquerades as a separate log line, confusing consumers of the logs (either human or automated).

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

GHSA-cx25-xg7c-xfm5 — Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability

2026-10-06T03:00:32.742921+00:00

Affected: Maven: org.apache.struts:struts-extras, Maven: struts:struts

** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.

This issue affects Apache Struts Extras: before 2.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

WID-SEC-W-2025-1691 — Apache Struts: Schwachstelle ermöglicht Manipulation

2026-10-06T03:00:32.742954+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um Daten zu manipulieren.