Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-52217 EUVD-2025-28417GHSA-q24h-xm83-9vcm

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied in…

Published Aug 26, 2025 · Updated Aug 27, 2025 · Assigned by mitre

Description

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied input, allowing injection of arbitrary HTML.

References