CVE-2025-55127

5.4 mediumEPSS 0.2%

Medium (5.4) in aquaplatform revive adserver. EPSS 0.2% chance of exploitation in the next 30 days.

HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-156
Published: 2025-11-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

aquaplatform:revive_adserver

References

https://hackerone.com/reports/3413764

Check your stack JSON