CVE-2025-2917

ChestnutCMS up to version 1.5.3 is affected by a path traversal vulnerability in the readFile function at /dev-api/cms/file/read. By manipulating the filePath argument, an attacker can traverse directories and potentially access sensitive files. The issue is exploitable remotely, and public explo...

CVE-2024-56828

CVE-2024-56828 affects ChestnutCMS up to 1.5.0. The /api/member/avatar endpoint accepts a base64 data URL, decodes the payload via the service’s uploadAvatarByBase64, and derives a file suffix from the encoded content (substring from the 11th character to the first semicolon). The decoded data is...

CVE-2025-2031

ChestnutCMS up to version 1.5.2 exposes a vulnerability in the file upload endpoint /dev-api/cms/file/upload. The root cause is lack of validation of the uploaded file in the parameter file, enabling an attacker to perform an unrestricted upload and remotely execute arbitrary code. Multiple sourc...

CVE-2025-5552

CVE-2025-5552 affects ChestnutCMS up to version 15.1, targeting the API Endpoint’s file /dev-api/groovy/exec. The issue is a deserialization vulnerability that can be exploited remotely; exploitation details have been publicly disclosed. Several connected sources confirm this, including Red Hat a...

CVE-2024-57450

Summary: CVE-2024-57450 affects ChestnutCMS versions 1.5.0 and older, where the Create template function allows file uploads. This is documented across multiple feeds as a vulnerability with a high severity (CVSS 3.1 base score 9.8) and is described as a vulnerability in ChestnutCMS

CVE-2024-57451

CVE-2024-57451 affects ChestnutCMS

CVE-2025-2032

CVE-2025-2032 affects ChestnutCMS 1.5.2. The vulnerability is in the function renameFile of the file /cms/file/rename, where manipulation of the argument rename leads to a path traversal flaw. Documents indicate the exploit has been disclosed publicly and may be used, but do not provide specific ...

CVE-2024-57452

CVE-2024-57452 affects ChestnutCMS <= 1.5.0 where the vulnerability resides in contentcore.controller.FileController, enabling arbitrary file deletion (delete any file/folder). Root cause: inadequate access control/input handling in the file deletion logic. Impact: potential data loss with hig...

CVE-2025-12923

CVE-2025-12923 affects liweiyi ChestnutCMS up to 1.5.8. The vulnerability is in the resourceDownload function under /dev-api/common/download, where manipulation of the path parameter enables path traversal. The issue can be exploited remotely and the exploit has been publicly disclosed. Affected ...

CVE-2025-70073

Summary: CVE-2025-70073 affects ChestnutCMS versions prior to 1.5.9. The issue enables a remote attacker to execute arbitrary code through the template creation function. The provided sources explicitly describe vulnerable software versions (ChestnutCMS v1.5.8 and earlier) and cite a template cre...

CVE-2025-15009

The CVE-2025-15009 entry affects liweiyi ChestnutCMS up to version 1.5.8, specifically the Filename Handler’s FilenameUtils.getExtension function in /dev-api/common/upload. The vulnerability arises from how the File argument is manipulated, enabling unrestricted remote file uploads. Multiple sour...