Apache SkyWalking is an open-source observability and application performance monitoring platform used to monitor microservices and distributed systems.
Overview
Apache SkyWalking is an open-source observability and application performance monitoring platform used to monitor microservices and distributed systems. Two recent reports disclose a vulnerability that enables cross-site scripting (XSS) in SkyWalking, highlighting a security risk where attackers could execute malicious scripts in victims' browsers via SkyWalking dashboards or APIs; timely patching and hardening are critical to prevent data exposure and session compromise.
Related Threat Clusters
-
Vulnerability in Apache SkyWalking Enables XSS Attacks
A vulnerability in Apache SkyWalking has been identified, allowing attackers to execute cross-site scripting (XSS) attacks. This flaw affects users of the application performance monitoring tool, potentially…
3 articles · Updated November 27, 2025
Recent Intelligence Reports
- Apache SkyWalking Vulnerability Lets Attackers Expose Users to XSS Attacks — Cyberpress · November 27, 2025
- Apache SkyWalking Flaw Allows Attackers to Launch XSS Attacks — Gbhackers · November 27, 2025