Security Advisory

CVE-2019-18211

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-12-23 22:13:58

Last updated 2024-08-05 01:47:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege user.

← Browse all CVEs View on cve.org ↗