1 matches found
CVE-2025-46546: Improper Neutralization of Special Elements used in an SQL Command
In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll,...
8.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
20