GHSA-gfhp-jgp6-838j

Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-39256

Packages

Ecosystem	Package	Affected	Fixed in
NuGet	CompositeC1.Core	< 6.13	6.13

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability. The authenticated user may perform the actions unknowingly by visiting a specially crafted site. ### Patches Patched in C1 CMS v6.13 ### Workarounds Upgrade to C1 CMS v6.13 or newer is required ### Credit This issue was discovered and reported by Markus Wulftange / [Code White GmbH](https://code-white.com/en/).

References

External links from the advisory. They lead to third-party sites.

https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-gfhp-jgp6-838j web
https://nvd.nist.gov/vuln/detail/CVE-2022-39256 advisory
https://github.com/Orckestra/C1-CMS-Foundation/pull/814 web
https://github.com/Orckestra/C1-CMS-Foundation/commit/af856ab5a62d19acf6aea1b1f4c6c3c4985c9446 web
https://github.com/Orckestra/C1-CMS-Foundation package
https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.13 web