Skip to content
OpenAdvisories

Vendor

Orckestra

3 known vulnerabilities.

Products

C1-CMS-Foundation 2 C1 CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2022-24789

    Deserialization of untrusted data in C1 CMS.

    C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network o…

    Orckestra C1-CMS-Foundation C1CMS.Assemblies NuGet
  • High 8.8
    CVE-2021-34992

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10…

    Orckestra C1 CMS