CVE-2025-54656

CVE-2025-54656 affects Apache Struts Extras before 2. The vulnerability is due to improper output neutralization for logs: when using LookupDispatchAction, untrusted input can be written to logs, potentially creating misleading log lines. The project is retired and no fix is planned; IBM/PTsecuri...