SelectZero Data Observability Platform Content Spoofing Vulnerability

A content spoofing vulnerability allowing text injection has been identified in the SelectZero Data Observability Platform, affecting versions prior to 2025.5.2. The issue arises from improper sanitization of certain parameters, which enables attackers to inject arbitrary text or limited HTML into the login page.

Impact

Exploitation of this vulnerability allows for content spoofing, where injected text or HTML could mislead users or alter the appearance of the login page.

Remediation

Users can update to SelectZero Data Observability Platform version 2025.5.2 or later to address this vulnerability.