Skip to content
OpenAdvisories

Package · NuGet

CompositeC1.Core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.0
    CVE-2022-39256

    Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.

    Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability…

    Orckestra C1-CMS-Foundation CompositeC1.Core NuGet