PT-2025-34774 · Selectzero · Selectzero Data Observability Platform

Name of the Vulnerable Software and Affected Versions: SelectZero SelectZero Data Observability Platform versions prior to 2025.5.2 Description: SelectZero Data Observability Platform contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary external links via HTML...

CVE-2025-52218

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection. Improper sanitization of unspecified parameters allows attackers to inject arbitrary text or limited HTML into the login page...

CVE-2025-52217

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied input, allowing injection of arbitrary HTML...

CVE-2025-52219

CVE-2025-52219 affects SelectZero Data Observability Platform older than 2025.5.2, where an Open Redirect vulnerability exists due to legacy UI fields allowing arbitrary external links via HTML Injection. Affected component is the web UI frontend, with the root cause described as an open redirect...