CVE-2025-46547
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role…
Published: 2025-04-25 · CVSS: 5.4 · CVSS 3.1
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7