ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://locrian-lightning-dc7.notion.site/Directory-traversal-1628e5e2b1a280fdb463c2235acc7f75 | Exploit Third Party Advisory |
Configurations
History
13 May 2025, 19:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
1000mz chestnutcms
1000mz |
|
| CPE | cpe:2.3:a:1000mz:chestnutcms:*:*:*:*:*:*:*:* | |
| References | () https://locrian-lightning-dc7.notion.site/Directory-traversal-1628e5e2b1a280fdb463c2235acc7f75 - Exploit, Third Party Advisory |
03 Feb 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-03 21:15
Updated : 2025-05-13 19:31
NVD link : CVE-2024-57451
Mitre link : CVE-2024-57451
JSON object : View
Products Affected
1000mz
- chestnutcms
CWE
No CWE.