Vulnerabilities

TI-2022-18632 CVE-2022-39256 · GHSA-gfhp-jgp6-838j

Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.

MEDIUM 44

Orckestra C1 CMS is a .NET based Web Content Management System.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01663 Published 2022-09-27 Fixed in 6.13 CWE-502

TI-2022-08602 CVE-2022-24789 · GHSA-8pp6-8x4q-c5mx

LOW 35

C1 CMS is an open-source, .NET based Content Management System (CMS).

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00764 Published 2022-03-28 Fixed in 6.12, 6.12.8122.18346 CWE-918

TI-2021-13979 CVE-2021-34992 · GHSA-xr89-j843-vpgq

MEDIUM 45

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04274 Published 2021-11-15 No fix listed CWE-502

TI-2019-13230 CVE-2019-18211 · GHSA-76qf-3cvm-8qwq

MEDIUM 43

An issue was discovered in Orckestra C1 CMS through 6.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0256 Published 2019-12-23 No fix listed CWE-502