CVE-2025-54057: Apache SkyWalking: Stored XSS vulnerability

[Zhenxu Ke <kezhenxu94 () apache org>]

Severity: important 

Affected versions:

- Apache SkyWalking through 10.2.0

Description:

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.

This issue affects Apache SkyWalking: <= 10.2.0.

Users are recommended to upgrade to version 10.3.0, which fixes the issue.

Credit:

Vinh Nguyễn Quang (vinhnq4902 () gmail com) (reporter)

References:

https://lists.apache.org/thread/sl2x2tx8y007x0mo746yddx2lvnv9tcr
https://skywalking.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-54057