Filtered by vendor 1000cms Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-2917 1 1000cms 1 Chestnutcms 2025-04-14 4.3 Medium
A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. Affected is the function readFile of the file /dev-api/cms/file/read. The manipulation of the argument filePath leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.