CVE-2025-55127

HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users

Medium · published November 20, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.2th percentile
Published
2025-11-20T19:07Z
EPSS history
Timeline
  • 20 NOV 19:07Z
    HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users
    cvelistv5