Product · Apache Software Foundation

Apache Struts Extras

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2025-54656

Apache Struts Extras: Improper Output Neutralization for Logs

** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Extras: before 2. When using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any…

Apache Software Foundation Apache Struts Extras struts:struts org.apache.struts:struts-extras Maven

Jul 30, 2025