SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection. Improper sanitization of unspecified parameters allows attackers to inject arbitrary text or limited HTML into the login page.
| Software | From | Fixed in |
|---|---|---|
| selectzero / selectzero | - | 2025.5.2 |