C1CMS.Assemblies
C1 CMS Foundation - .NET based, open source and a bundle of joy!
View on Github
Activity
- Latest release
- 10h ago
- Total releases
- 19
- Cadence
- ~5 months
- Last 12 months
- 2
Reach
- Stars
- 263
Details
- First release
- Feb 09, 2017
| Version | Released | |
|---|---|---|
6.13.9750.24219
patch
| ||
6.13.9280.21599
patch
| ||
6.13.9173.13104
patch
| ||
6.13.8985.15323
patch
| ||
6.13.8683.17056
patch
| ||
6.13.8305.22849
minor
| ||
6.12.8122.18346
minor
| ||
6.11.7982.26191
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.10.7583.21856
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.9.7410.31615
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.8.7271.23834
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.7.7240.24791
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.6.6912.30810
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.5.6754.25114
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.4.6638.27326
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.3.6599.29375
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.2.6435.31469
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.1.6325.31805
minor
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev | ||
6.0.6248.33161
initial
1 CVE
CVE-2022-24789
GHSA-8pp6-8x4q-c5mx
GHSA-j9c2-gr6m-pp45
Mar 30, 2022
Server side request forgery in C1 CMS
7.6
/ 10
High
Network
Low
Low
None
Unchanged
Low
Low
High
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist. Affected versions
6.0.6248.33161
6.1.6325.31805
6.10.7583.21856
6.11.7982.26191
6.2.6435.31469
6.3.6599.29375
6.4.6638.27326
6.5.6754.25114
6.6.6912.30810
6.7.7240.24791
6.8.7271.23834
6.9.7410.31615
Fixed in
6.12.8122.18346
References Updated Oct 14, 2025 · Source: OSV.dev |