TI-2024-37899 CVE-2024-57450 · GHSA-73mq-397v-4rm9
ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
Priority HIGH 82
ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
1000mz
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
1000mz records in CISA KEVNo 1000mz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Chestnutcms · all components
TI-2024-37682 CVE-2024-56828 · GHSA-2423-2c9w-8vgr
File Upload vulnerability in ChestnutCMS through 1.5.0.
Priority HIGH 82
File Upload vulnerability in ChestnutCMS through 1.5.0.
TI-2024-37901 CVE-2024-57452 · GHSA-3gxq-m6pm-q3fj
ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in…
Priority HIGH 72
ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder.
TI-2024-37900 CVE-2024-57451 · GHSA-wgvg-989w-h74r
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in…
Priority HIGH 72
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory.
TI-2025-43020 CVE-2025-70073 · GHSA-4frq-g5px-8jfp
An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary…
Priority HIGH 67
An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function
TI-2025-13692 CVE-2025-15009 · GHSA-j725-9864-6gc2
liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload
Priority MEDIUM 57
A flaw has been found in liweiyi ChestnutCMS up to 1.5.8.
TI-2025-04992 CVE-2025-5552 · GHSA-w8w4-cj3p-j5vr
ChestnutCMS API Endpoint exec deserialization
Priority MEDIUM 57
A vulnerability was found in ChestnutCMS up to 15.1.
TI-2025-02548 CVE-2025-2917 · GHSA-cw8p-4qwh-rvpm
ChestnutCMS read readFile path traversal
Priority MEDIUM 57
A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3.
TI-2025-01769 CVE-2025-2031 · GHSA-j7g6-76w3-j7qf
ChestnutCMS upload uploadFile unrestricted upload
Priority MEDIUM 57
A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2.
TI-2025-11840 CVE-2025-12923 · GHSA-8fjh-p7j5-79fg
liweiyi ChestnutCMS download resourceDownload path traversal
Priority MEDIUM 56
A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8.
TI-2025-01770 CVE-2025-2032 · GHSA-8f74-hp4g-75m2
ChestnutCMS rename renameFile path traversal
Priority MEDIUM 56
A vulnerability classified as problematic was found in ChestnutCMS 1.5.2.