Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22250
HistoryMar 14, 2022 - 12:00 a.m.

Orchard Core Permissions and Access Control Issues Vulnerability

2022-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

21.6%

Orchard Core is an open source modular and multi-tenant application framework built with Asp.Net Core and a content management system (Cms) built on top of the framework from Orchard Core, Inc. Orchard Core is vulnerable to privilege permission and access control issues that could be exploited by an attacker to create Any role.

CPENameOperatorVersion
orchardcore orchard corelt1.3.0

0.001 Low

EPSS

Percentile

21.6%