Maven/struts:struts CVE-2025-54656: medium 6.5, EPSS 0.63%

Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-cx25-xg7c-xfm5#Maven/struts:struts
• https://nvd.nist.gov/vuln/detail/CVE-2025-54656
• https://github.com/apache/struts
• https://lists.apache.org/thread/so5cn07j2zn9vlf1xnfqp630wts719rr
• http://www.openwall.com/lists/oss-security/2025/07/30/1

CVE-2025-54656 · published 2025-07-30T18:31:36Z · modified 2025-11-14T23:09:54.325221Z · JSON