CVE-2025-52218
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-26

Last updated on: 2025-09-09

Assigner: MITRE

Description
SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection. Improper sanitization of unspecified parameters allows attackers to inject arbitrary text or limited HTML into the login page.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-26
Last Modified
2025-09-09
Generated
2026-06-16
AI Q&A
2025-08-26
EPSS Evaluated
2026-06-14
NVD
CVE-2025-52218
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
selectzero selectzero to 2025.5.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in SelectZero Data Observability Platform before version 2025.5.2 allows attackers to perform content spoofing or text injection by exploiting improper sanitization of certain parameters. This means attackers can inject arbitrary text or limited HTML into the login page, potentially misleading users or altering the page's appearance.

Impact Analysis

The vulnerability can impact you by allowing attackers to inject misleading or malicious content into the login page, which could deceive users into trusting false information or potentially facilitate phishing attacks. This could undermine user trust and potentially lead to unauthorized access attempts.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-52218. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart