We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
Reserved 2025-04-24 | Published 2025-04-25 | Updated 2025-04-25 | Assigner mitreCWE-352 Cross-Site Request Forgery (CSRF)
gist.github.com/ArtemBrylev/9af206c46d7505db03ad6fcd9fc46f7f
Support options
