CVE-2025-54057

Summary

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.

This issue affects Apache SkyWalking: <= 10.2.0.

Users are recommended to upgrade to version 10.3.0, which fixes the issue.

Affected Software

Weaknesses

• CWE-80: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2025/11/27/1
• http://www.openwall.com/lists/oss-security/2026/04/13/3

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://lists.apache.org/thread/sl2x2tx8y007x0mo746yddx2lvnv9tcr

• ←Previous
• Next→