Orckestra C1 Cms
4 CVEs affecting Orckestra C1 Cms. Latest disclosed: 2022-09-27. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39256 | Critical | 9.0 | 2022-09-27 | Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on… |
CVE-2021-34992 | High | 8.8 | 2021-11-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit… |
CVE-2019-18211 | High | 8.8 | 2019-12-23 | An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped Bi… |
CVE-2022-24789 | High | 7.6 | 2022-03-28 | C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery… |