CVE-2025-54057: Stored XSS Attack Exposes Dashboards

indusface logo
Indusface
Dec 5, 2025
Indusface

⚠️ New XSS vulnerability in Apache SkyWalking! CVE-2025-54057 enables stored script injections that steal sessions and manipulate dashboards. Fix + protection steps inside. #XSS #CVE2025
Read More : https://www.indusface.com/blog/cve-2025-54057-apache-skywalking-vulnerability/
For more insights on website and API security fundamentals, subscribe to our newsletter: https://bit.ly/4oN0XdC
#SkyWalking #StoredXSS #AppSec #WebSecurity #ThreatAlert #ZeroDay#apptrana

Copyright © 2026 OpsMatters™. All rights reserved.