CVE-2025-54656

The Apache Struts Extras: before 2 component is vulnerable to an Improper Output Neutralization for Logs (CWE-117) issue. When using LookupDispatchAction , the application may print untrusted input to the logs without filtering. This allows an attacker to provide specially-crafted input that inje...