HTML Injection Vulnerability in SelectZero Data Observability Platform
CVE-2025-52217

Currently unrated

Key Information:

Vendor: SelectZero
Status: Data Observability Platform
Vendor: CVE Published:; 26 August 2025

What is CVE-2025-52217?

The SelectZero Data Observability Platform prior to version 2025.5.2 contains a vulnerability that allows for HTML Injection through improperly handled user-supplied input in legacy UI fields. This flaw can enable attackers to inject arbitrary HTML, potentially compromising the application's data integrity and user experience.

References

https://selectzero.io/change-log/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 26, 2025
Vulnerability Reserved
Jun 16, 2025