Описание
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
Ссылки
- Not Applicable
- Third Party Advisory
- Product
- Not Applicable
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sherparpa:sherpa_orchestrator:141851:*:*:*:*:*:*:*
EPSS
Процентиль: 7%
0.00027
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 5.4
github
10 месяцев назад
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
EPSS
Процентиль: 7%
0.00027
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-352