CVE-2026-90772
Amundsen Frontend through 4.3.0 Stored XSS via Description
- State
- Published
- Severity
- 8.3 High
- Published
- Sep 13, 2026
- Updated
- Sep 24, 2026
- Reserved
- Sep 13, 2026
Description
Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descriptions via the metadata service or Elasticsearch, executing JavaScript in every user's browser that views search results.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.3 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N | VulnCheck |
| 3.1 | 7.6 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N | VulnCheck |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Products
| Product | Versions |
|---|---|
amundsen-frontendamundsen-io |
|
References
- GitHub Issue #2362issue-tracking
- https://github.com/amundsen-io/amundsenproduct
- https://github.com/amundsen-io/amundsen/blob/frontend-4.3.0/frontend/amundsen_application/static/js/components/ResourceListItem/TableListItem/index.tsxtechnical-description
- VulnCheck Advisory: Amundsen Frontend through 4.3.0 Stored XSS via Descriptionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.