CVE-2024-57452

ChestnutCMS =1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder...

CVE-2024-57451: Improper Limitation of a Pathname to a Restricted Directory

ChestnutCMS =1.5.0 has a directory traversal vulnerability in contentcore.controller.FileControllergetFileList, which allows attackers to view any directory...

ChestnutCMS security vulnerabilities

ChestnutCMS is a front-end and back-end separated enterprise-level content management system by liweiyi individual developer. A security vulnerability exists in ChestnutCMS version 1.5.0 and earlier versions, which stems from a directory traversal issue contained in...

CVE-2024-57451

ChestnutCMS =1.5.0 has a directory traversal vulnerability in contentcore.controller.FileControllergetFileList, which allows attackers to view any directory...

PT-2025-3448

Name of the Vulnerable Software and Affected Versions ChestnutCMS versions =1.5.0 Description The issue allows attackers to view any directory due to a directory traversal vulnerability in the contentcore.controller.FileControllergetFileList function. This enables unauthorized access to sensitive...

CVE-2024-57452: Files or Directories Accessible to External Parties

ChestnutCMS =1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder...