CVE-2025-2031: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2. This affects the function uploadFile of the file /dev-api/cms/file/upload. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-9965

Name of the Vulnerable Software and Affected Versions ChestnutCMS versions up to 1.5.2 Description A critical issue has been discovered that affects the uploadFile function of the /dev-api/cms/file/upload API endpoint. The manipulation of the file argument leads to unrestricted upload. This issue...