high7.5
CVE-2024-57451
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory.
Impact
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 1000mz | Chestnutcms | through 1.5.0 |