Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Orchardcore Subscribe
Filtered by product Orchard Core
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25966 1 Orchardcore 1 Orchard Core 2022-02-25 6.5 MEDIUM 8.8 HIGH
In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.