Vulnerability Details CVE-2024-57451
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.6%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2024-57451
-
cpe:2.3:a:1000mz:chestnutcms:1.3.18
-
cpe:2.3:a:1000mz:chestnutcms:1.3.19
-
cpe:2.3:a:1000mz:chestnutcms:1.3.20
-
cpe:2.3:a:1000mz:chestnutcms:1.3.21
-
cpe:2.3:a:1000mz:chestnutcms:1.3.23
-
cpe:2.3:a:1000mz:chestnutcms:1.3.24
-
cpe:2.3:a:1000mz:chestnutcms:1.3.25
-
cpe:2.3:a:1000mz:chestnutcms:1.4.0
-
cpe:2.3:a:1000mz:chestnutcms:1.4.1
-
cpe:2.3:a:1000mz:chestnutcms:1.4.2
-
cpe:2.3:a:1000mz:chestnutcms:1.4.3
-
cpe:2.3:a:1000mz:chestnutcms:1.4.4
-
cpe:2.3:a:1000mz:chestnutcms:1.4.5
-
cpe:2.3:a:1000mz:chestnutcms:1.5.0