We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll, /api/gui/processVersion/export/csv/, /api/gui/processVersion/export/xlsx/, /api/gui/processVersion/list/, /api/gui/robot/list/, /api/gui/task/export/csv/, /api/gui/task/export/xlsx/, and /api/gui/task/list/.
Reserved 2025-04-24 | Published 2025-04-25 | Updated 2025-04-25 | Assigner mitreCWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
gist.github.com/ArtemBrylev/59b4c0825a988f39a58b79e4e8d2f378
Support options
