[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQ_4n7mjr--QVaX8Dqj-B6kcYsEoTPbXLTLyFveSkuZk":3,"g5a-risk:CVE-2025-54656":109},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":52,"weaknesses":53,"weaknessesCount":40,"isActivelyExploited":62,"cisaInfo":26,"otxData":26,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":98,"notableEvents":99},"CVE-2025-54656","What is CVE-2025-54656?","** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.\n\nThis issue affects Apache Struts Extras: before 2.\n\nWhen using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead to log output where part of the message masquerades as a separate log line, confusing consumers of the logs (either human or automated). \n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Extras: before 2. Wh...","2025-07-30T16:15:28.693","2025-11-04T22:16:29.117",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,2.5,[],[],0.00589,[31,31,31,31,31,31,31],"Medium",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"apache","struts_extras","*","cpe:2.3:a:apache:struts_extras:*:*:*:*:*:*:*:*",1,[42,48],{"url":43,"source":44,"tags":45},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fso5cn07j2zn9vlf1xnfqp630wts719rr","Apache",[46,47],"Mailing List","Vendor Advisory",{"url":49,"source":50,"tags":51},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F07\u002F30\u002F1","Openwall",[],2,[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-117","Improper Output Neutralization for Logs","The product does not neutralize or incorrectly neutralizes output that is written to logs.","This can allow an attacker to forge log entries or inject malicious content into logs.\nLog forging vulnerabilities occur when:","Draft","Base","Simple",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2025-54656? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-54656, a medium severity cyber security vulnerability from 2025. ** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutraliz...","CVE-2025-54656, CVE-2025-54656 vulnerability, CVE-2025-54656 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, apache security, struts_extras vulnerability","\u002Fwhat-is\u002Fcve-2025-54656",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-54656","Cybersecurity","CVE-2025-54656, CVE-2025-54656 vulnerability, CVE-2025-54656 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":26,"Negate":26,"Nodes":91},[92],{"Operator":93,"Negate":62,"CPEMatch":94},"OR",[95],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":96,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":97,"VersionEndIncluding":26},"B28F17ED-2F73-48A0-BAE8-91B3C9AE1B24","2.0",[],[100],{"id":101,"eventType":102,"eventTime":103,"details":104,"label":105,"color":106},"0db957a6-12d7-43e0-9dea-2c0585893729","NEW_NVD","2025-07-31T04:00:56.067568+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":108,"version":97},1792329636844,{"score":110,"band":111,"action":112,"scoredAt":113},25,"Low","Monitor","2026-10-16T07:08:15.942665+00:00"]