diff --git a/advisories/unreviewed/2025/11/GHSA-v6x2-4q87-rf82/GHSA-v6x2-4q87-rf82.json b/advisories/unreviewed/2025/11/GHSA-v6x2-4q87-rf82/GHSA-v6x2-4q87-rf82.json index e4002c2c0bfda..786ae7ffa857b 100644 --- a/advisories/unreviewed/2025/11/GHSA-v6x2-4q87-rf82/GHSA-v6x2-4q87-rf82.json +++ b/advisories/unreviewed/2025/11/GHSA-v6x2-4q87-rf82/GHSA-v6x2-4q87-rf82.json @@ -1,19 +1,47 @@ { "schema_version": "1.4.0", "id": "GHSA-v6x2-4q87-rf82", - "modified": "2025-11-27T15:31:25Z", + "modified": "2025-11-27T15:32:27Z", "published": "2025-11-27T12:30:29Z", "aliases": [ "CVE-2025-54057" ], + "summary": "Apache SkyWalking: Stored XSS vulnerability", "details": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.\n\nThis issue affects Apache SkyWalking: <= 10.2.0.\n\nUsers are recommended to upgrade to version 10.3.0, which fixes the issue.", "severity": [], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.skywalking.apm-webapp" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "10.3.0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.2.0" + } + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54057" }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/skywalking" + }, { "type": "WEB", "url": "https://lists.apache.org/thread/sl2x2tx8y007x0mo746yddx2lvnv9tcr"