orchidsoftware vulnerabilities

Products

• platform 3

Latest orchidsoftware CVEs

Newest publication first

1. CVE-2024-51992 Method Exposure Vulnerability in Modals in orchid/platform

   Published 2024-11-11

   Medium·CVSS 4.1 EPSS 0.33%

   Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue (CWE-749: Exposed Dangerous Method or Function) in the Orchid Platform’s asynchronous modal fun...

2. CVE-2023-36825 Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

   Published 2023-07-11

   Critical·CVSS 9.8 EPSS 1.1%

   Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the _stat...

3. CVE-2020-15263 XSS in platform

   Published 2020-10-19

   Medium·CVSS 6.1 EPSS 0.75%

   In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.