CVE-2025-55127 - Apache Struts Whitelist Injection

CVE ID : CVE-2025-55127 Published : Nov. 20, 2025, 7:16 p.m. | 1 hour, 22 minutes ago Description : HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...