C1-CMS-Foundation vulnerabilities

2 known vulnerabilities in C1-CMS-Foundation from Orckestra. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  C1-CMS-Foundation: Deserialization of Untrusted Data

  CVE-2022-39256Sep 27, 2022OrckestraEPSS 1.66%

  Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability.

• 7.6 High severity

  C1-CMS-Foundation: Server-Side Request Forgery

  CVE-2022-24789Mar 28, 2022Orckestra

  C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or