1000mz vulnerabilities
We track 3 vulnerabilities in 1000mz products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 3, 2025.
3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score
Latest 1000mz vulnerabilities
- 7.5 High severity
Chestnutcms: Improper Limitation of a Pathname to a Restricted Directory
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory.
- 7.5 High severity
Chestnutcms: Files or Directories Accessible to External Parties
ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder.
- 9.8 Critical severity
Chestnutcms: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/member/avatar API endpoint receives a base64 string as input. This string is then passed to the memberService.uploadAvatarByBase64 method for pr