Description (CNA)
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sherpa / Orchestrator | affected 141851 |
CWE
CWE-352
References
- https://sherparpa.com
- https://twitter.com/ArtyomBrylev
- https://deiteriy.com
- https://gist.github.com/ArtemBrylev/9af206c46d7505db03ad6fcd9fc46f7f
ADP enrichment
No English description supplied.
No references supplied.