What’s Vulnerable › Products

ChestnutCMS vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your ChestnutCMS version is affected

Latest ChestnutCMS vulnerabilities

• CVE-2025-70073 — (CVSS 7.2)
• CVE-2025-15009 — liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload (CVSS 8.8)
• CVE-2025-12923 — liweiyi ChestnutCMS download resourceDownload path traversal (CVSS 4.9)
• CVE-2025-5552 — ChestnutCMS API Endpoint exec deserialization (CVSS 8.8)
• CVE-2025-2917 — ChestnutCMS read readFile path traversal (CVSS 7.5)
• CVE-2025-2032 — ChestnutCMS rename renameFile path traversal (CVSS 3.5)
• CVE-2025-2031 — ChestnutCMS upload uploadFile unrestricted upload (CVSS 7.6)
• CVE-2024-57451 — (CVSS 7.5)
• CVE-2024-57452 — (CVSS 7.5)
• CVE-2024-57450 — (CVSS 9.8)
• CVE-2024-56828 — (CVSS 9.8)