ChestnutCMS vulnerabilities
We track 3 vulnerabilities in ChestnutCMS products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 4, 2025.
Latest ChestnutCMS vulnerabilities
- 8.8 High severity
A vulnerability was found in ChestnutCMS up to 15.1.
A vulnerability was found in ChestnutCMS up to 15.1. It has been declared as critical. This vulnerability affects unknown code of the file /dev-api/groovy/exec of the component API Endpoint. The manipulation leads to deserialization. The attack can be initiate
- 7.5 High severity
ChestnutCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. Affected is the function readFile of the file /dev-api/cms/file/read. The manipulation of the argument filePath leads to path traversal. It is possible to launch the at
- 7.6 High severity
ChestnutCMS: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2. This affects the function uploadFile of the file /dev-api/cms/file/upload. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the atta