CVE-2025-2917

A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. Affected is the function readFile of the file /dev-api/cms/file/read. The manipulation of the argument filePath leads to path traversal. It is possible to launch the attack remotely. The exploit has been...

PT-2025-13556

Name of the Vulnerable Software and Affected Versions ChestnutCMS versions up to 1.5.3 Description A problematic issue was found in the readFile function of the /dev-api/cms/file/read API endpoint. The manipulation of the filePath argument leads to path traversal. This issue can be exploited...