CVE-2022-39256
1 advisory.
NuGet/CompositeC1.Core CVE-2022-39256: critical 9
Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.
Action: Upgrade CompositeC1.Core to 6.13 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.13 | - |
Fixed versions
| 6.13 |
Sources
- osv: GHSA-gfhp-jgp6-838j
- https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-gfhp-jgp6-838j
- https://nvd.nist.gov/vuln/detail/CVE-2022-39256
- https://github.com/Orckestra/C1-CMS-Foundation/pull/814
- https://github.com/Orckestra/C1-CMS-Foundation/commit/af856ab5a62d19acf6aea1b1f4c6c3c4985c9446
- https://github.com/Orckestra/C1-CMS-Foundation
- https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.13
CVE-2022-39256 · published · modified · JSON