ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://locrian-lightning-dc7.notion.site/File-Delete-1628e5e2b1a280cfb497de7b8bcff128 | Exploit Third Party Advisory |
| https://locrian-lightning-dc7.notion.site/File-Delete-1628e5e2b1a280cfb497de7b8bcff128 | Exploit Third Party Advisory |
Configurations
History
13 May 2025, 19:39
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
1000mz chestnutcms
1000mz |
|
| CPE | cpe:2.3:a:1000mz:chestnutcms:*:*:*:*:*:*:*:* | |
| References | () https://locrian-lightning-dc7.notion.site/File-Delete-1628e5e2b1a280cfb497de7b8bcff128 - Exploit, Third Party Advisory |
03 Feb 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-03 20:15
Updated : 2025-05-13 19:39
NVD link : CVE-2024-57452
Mitre link : CVE-2024-57452
JSON object : View
Products Affected
1000mz
- chestnutcms
CWE
No CWE.