PUBLISHED
2025-11-27 12:15
MODIFIED
2025-11-27 12:15
EPSS (Prob. Exploit)
0.76%
Top 45.2%
> DESCRIPTION
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.
This issue affects Apache SkyWalking: <= 10.2.0.
Users are recommended to upgrade to version 10.3.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
> GITHUB SECURITY ADVISORY
GHSA-v6x2-4q87-rf82
MODERATE
Apache SkyWalking has a stored XSS vulnerability
AFFECTED PACKAGES:
MAVEN / org.apache.skywalking:apm-webapp
<= 10.1.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
27/11/2025 12:15
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes spe...
Nouvelle valeur:
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special charact...
📊
ENRICHISSEMENT
19/01/2026 17:37
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/12/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes spe...
Total des modifications: 3
Dernière mise à jour: 1 week ago