CVE-2024-57451

CVE-2024-57451 affects ChestnutCMS

CVE-2024-57452

CVE-2024-57452 affects ChestnutCMS <= 1.5.0 where the vulnerability resides in contentcore.controller.FileController, enabling arbitrary file deletion (delete any file/folder). Root cause: inadequate access control/input handling in the file deletion logic. Impact: potential data loss with hig...