CVEvulnerability

CVE-2025-54057

6.1 MEDIUM Published 2025-11-27 Modified 2026-10-18 Official page ↗

Status: Modified
Published: 2025-11-27
Last modified: 2026-10-18
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses: CWE-80

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade to version 10.3.0, which fixes the issue.

Affected configurations

• apache skywalking (< 10.3.0)

Weakness · CWE (1)

CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References

https://lists.apache.org/thread/sl2x2tx8y007x0mo746yddx2lvnv9tcr Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/11/27/1 Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/04/13/3 www.openwall.com