Description
SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary external links via HTML Injection.
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Aug 26, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed