orchardcms

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

orchardcms records in CISA KEV

No orchardcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Orchard Core · all components

TI-2021-07972 CVE-2021-25966 · GHSA-wx4j-99r4-v8wg

HIGH 73

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01058 Published 2021-10-10 No fix listed CWE-613