CVE-2025-2031

Published: 2025-03-06T16:15Z

Last Modified: 2025-03-06T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2. This affects the function uploadFile of the file /dev-api/cms/file/upload. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt