HTML Injection

ethyca-fides is vulnerable to HTML Injection. The vulnerability arises due lack of of input validation coming from connected systems and data stores which is reflected in the downloaded data. This results in an HTML injection that can be abused to perform phishing attacks or malicious JS execution. Exploitation is limited to rogue admin UI users, malicious connected system and data subject user if tricked via a phishing attack.