Amundsen Frontend
Approved changes feed: RSS · Atom
cpe:2.3:a:amundsen-io:amundsen-frontend:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Amundsen Io (0dac12ae-7784-595a-86c4-375c0efcb5d2) |
|---|---|
| Product | Amundsen Frontend (35c7df61-2a9b-539f-ac21-1c69f6496878) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90772 |
vulnerable | 2026-09-16 04:33:05.354381 |
Amundsen Frontend through 4.3.0 Stored XSS via Description
HIGH (7.6)
Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descriptions via the metadata service or Elasticsearch, executing JavaScript in every user's browser that views search results.
Published: 2026-09-13T10:45:43.246Z
Updated: 2026-09-24T14:21:53.282Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.