1000mz Chestnutcms vulnerabilities

• 1000mz chestnutcms An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via... CVE-2025-70073 7.2 HighFebruary 5, 2026
• 1000mz chestnutcms liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload CVE-2025-15009 5.3 MediumDecember 22, 2025
• 1000mz chestnutcms liweiyi ChestnutCMS download resourceDownload path traversal CVE-2025-12923 5.1 MediumNovember 10, 2025
• 1000mz chestnutcms ChestnutCMS API Endpoint exec deserialization CVE-2025-5552 5.3 MediumJune 4, 2025
• 1000mz chestnutcms ChestnutCMS read readFile path traversal CVE-2025-2917 5.3 MediumMarch 28, 2025
• 1000mz chestnutcms ChestnutCMS rename renameFile path traversal CVE-2025-2032 5.1 MediumMarch 6, 2025
• 1000mz chestnutcms ChestnutCMS upload uploadFile unrestricted upload CVE-2025-2031 5.3 MediumMarch 6, 2025
• 1000mz chestnutcms ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller... CVE-2024-57452 7.5 HighFebruary 3, 2025
• 1000mz chestnutcms ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller... CVE-2024-57451 7.5 HighFebruary 3, 2025
• 1000mz chestnutcms ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function. CVE-2024-57450 9.8 CriticalFebruary 3, 2025
• 1000mz chestnutcms File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was... CVE-2024-56828 9.8 CriticalJanuary 6, 2025