What’s Vulnerable › Vulnerabilities

CVE-2025-46547

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-25 · updated 2026-06-17
• Weakness: CWE-352

Description

In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.

Affected products

• Sherpa Orchestrator: 141851

References

• https://deiteriy.com
• https://gist.github.com/ArtemBrylev/9af206c46d7505db03ad6fcd9fc46f7f
• https://sherparpa.com
• https://twitter.com/ArtyomBrylev

Get alerted when CVE-2025-46547 or the next vulnerability affects your stack