You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@skywalking.apache.org by Zhenxu Ke <ke...@apache.org> on 2025/11/27 02:17:59 UTC

CVE-2025-54057: Apache SkyWalking: Stored XSS vulnerability

Severity: important 

Affected versions:

- Apache SkyWalking through 10.2.0

Description:

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.

This issue affects Apache SkyWalking: <= 10.2.0.

Users are recommended to upgrade to version 10.3.0, which fixes the issue.

Credit:

Vinh Nguyễn Quang (vinhnq4902@gmail.com) (reporter)

References:

https://skywalking.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-54057