CyberSecBulletin

Orckestra vulnerabilities

We track 2 vulnerabilities in Orckestra products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2022.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Orckestra vulnerabilities

  • 8.0 High severity

    C1-CMS-Foundation: Deserialization of Untrusted Data

    CVE-2022-39256OrckestraEPSS 1.66%

    Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability.

  • 7.6 High severity

    C1-CMS-Foundation: Server-Side Request Forgery

    CVE-2022-24789Orckestra

    C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or