Логотип exploitDog
bind:CVE-2025-46545
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-46545

Количество 2

Количество 2

nvd логотип

CVE-2025-46545

10 месяцев назад

In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.

CVSS3: 4.4
EPSS: Низкий
github логотип

GHSA-37m8-vrcv-2x3f

10 месяцев назад

In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.

CVSS3: 4.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-46545

In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.

CVSS3: 4.4
0%
Низкий
10 месяцев назад
github логотип
GHSA-37m8-vrcv-2x3f

In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.

CVSS3: 4.4
0%
Низкий
10 месяцев назад

Уязвимостей на страницу