← Back

CVE-2025-55127

nvd nist
Published: Nov 20, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion.

Affected (1)

Aquaplatform
1 product
Revive Adserver
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Revive Adserver
From 6.0.0 to 6.0.3

Related CWEs

CWE-156
Improper Neutralization of Whitespace
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as whitespace when they are sent to a downstream component.

References (1)

Source: support@hackerone.com
ExploitIssue Tracking

Timeline

No history available yet.