CVE-2025-15009

The CVE-2025-15009 entry affects liweiyi ChestnutCMS up to version 1.5.8, specifically the Filename Handler’s FilenameUtils.getExtension function in /dev-api/common/upload. The vulnerability arises from how the File argument is manipulated, enabling unrestricted remote file uploads. Multiple sour...