chestnutcms vulnerabilities

CVEs whose affected-version data names the chestnutcms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-12923Low· 2.7

11mo ago

A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8

A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function resourceDownload of the file /dev-api/common/download. Executing manipulation of the argument path can lead to path traversal. The…

▾ Sunlit1000mz · chestnutcmsEPSS 0.57%via NVD