You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Zhenxu Ke <ke...@apache.org> on 2026/04/13 12:24:02 UTC

CVE-2025-54057: Apache SkyWalking: Stored XSS vulnerability

Severity: important 

Affected versions:

- Apache SkyWalking through 10.2.0

Description:

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.

This issue affects Apache SkyWalking: <= 10.2.0.

Users are recommended to upgrade to version 10.3.0, which fixes the issue.

Credit:

Vinh Nguyễn Quang (vinhnq4902@gmail.com) (reporter)

References:

https://lists.apache.org/thread/sl2x2tx8y007x0mo746yddx2lvnv9tcr
https://skywalking.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-54057