CVE-2025-54057

CWE-805 documents5 sources
Severity
6.1MEDIUM
EPSS
0.4%
top 36.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apache SkywalkingApache Software Foundation Apache Skywalking
Timeline
PublishedNov 27

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade to version 10.3.0, which fixes the issue.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages3 packages

▶NVDapache/skywalking< 10.3.0

🔴Vulnerability Details

3
GHSA
Apache SkyWalking has a stored XSS vulnerability↗2025-11-27
▶
CVEList
Apache SkyWalking: Stored XSS vulnerability↗2025-11-27
▶
OSV
Apache SkyWalking has a stored XSS vulnerability↗2025-11-27
▶
CVE-2025-54057 (MEDIUM CVSS 6.1) | Improper Neutralization of Script-R | cvebase.io