PT-2025-9978

Name of the Vulnerable Software and Affected Versions ChestnutCMS version 1.5.2 Description A problematic vulnerability was found in the renameFile function of the /cms/file/rename API endpoint. The manipulation of the rename argument leads to path traversal. The exploit has been publicly...

CVE-2025-2032: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used...