CVE-2025-15009
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload. Manipulation of the argument File can lead to unrestricted upload, and the attack may be launched remotely.
Risk Assessment
A publicly available exploit allows uploading arbitrary files, which can result in remote code execution or application compromise.
Recommendation
Update ChestnutCMS to a version containing the fix or implement validation of file extensions and MIME types for uploaded files. Consider restricting access to the upload endpoint.
Other vulnerabilities in ChestnutCMS
See all- CVE-2026-36458Critical
ChestnutCMS version 1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.
- CVE-2025-12923Low
In liweiyi ChestnutCMS up to 1.5.8, the resourceDownload function in /dev-api/common/download is vulnerable to path traversal via manipulation of the path argument. The attack can be launched remotely, and the exploit is publicly available.
Original NVD description (English source)
A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload of the component Filename Handler. Executing manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS