Approved changes feed: RSS · Atom
cpe:2.3:a:orchardcore:users:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Orchardcore (bd3125a7-07ca-54bd-827f-7c5cd620155b) |
|---|---|
| Product | Users (1f3b1e0d-366a-56e7-b7e1-6759e1e16ea3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-25966 |
vulnerable | 2026-06-08 05:30:41.791979 |
Orchard Core CMS - Improper Session Termination after Password Change
HIGH (8.8)
In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Published: 2021-10-10T09:45:11.697Z
Updated: 2025-04-30T16:24:51.258Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.