CVE-2025-30191 – “Apache Struts HTML Injection Vulnerability”

CVE ID : CVE-2025-30191

Published : Oct. 31, 2025, 8:54 a.m. | 32 minutes ago

Description : Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…