CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-39256 – Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.
https://notcve.org/view.php?id=CVE-2022-39256
Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability. The authenticated user may perform the actions unknowingly by visiting a specially crafted site. This issue is patched in C1 CMS v6.13. • https://github.com/Orckestra/C1-CMS-Foundation/pull/814 https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.13 https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-gfhp-jgp6-838j • CWE-502: Deserialization of Untrusted Data •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2022-24789 – Deserialization of untrusted data in C1 CMS.
https://notcve.org/view.php?id=CVE-2022-24789
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. • https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12 https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-j9c2-gr6m-pp45 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34992 – Orckestra C1 CMS Composite Deserialization of Untrusted Data Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-34992
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. • https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.11 https://www.zerodayinitiative.com/advisories/ZDI-21-1304 • CWE-502: Deserialization of Untrusted Data •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-18211
https://notcve.org/view.php?id=CVE-2019-18211
An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege user. Se detectó un problema en Orckestra C1 CMS versiones hasta 6.6. La clase EntityTokenSerializer en la biblioteca Composite.dll es propensa a una deserialización no comprobada de las cargas útiles de BinaryFormatter empaquetadas, conllevando a una ejecución de código remoto arbitrario para cualquier usuario poco privilegiado. • https://github.com/Orckestra/C1-CMS-Foundation/commits/dev • CWE-502: Deserialization of Untrusted Data •