Skip to content
OpenAdvisories

Vendor

liweiyi

2 known vulnerabilities.

Products

ChestnutCMS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-15009

    liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload

    A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload of the component Filename Handler. Executing manipulation of the argument File can lead to unrestri…

    liweiyi ChestnutCMS