← back
CVE-2025-46547

CVE-2025-46547

CVSS 5.4 MEDIUMEPSS 0.1%CWE-352
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Affected products
Sherpa · Orchestrator

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://deiteriy.comhttps://gist.github.com/ArtemBrylev/9af206c46d7505db03ad6fcd9fc46f7fhttps://sherparpa.comhttps://twitter.com/ArtyomBrylev