~ / search / GHSA-v6x2-4q87-rf82

GHSA-v6x2-4q87-rf82

Apache SkyWalking has a stored XSS vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-54057

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.skywalking:apm-webapp <= 10.1.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking versions <= 10.2.0. Users are recommended to upgrade to version 10.3.0, which fixes the issue. Version 10.3.0 has not been uploaded to the Maven registry at time of publish, please see [release notes](https://github.com/apache/skywalking/releases/tag/v10.3.0) for download instructions.

References

External links from the advisory. They lead to third-party sites.