1000mz kayıtları
1000mz üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-284 Improper Access Control2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-20 Improper Input Validation1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-56828İstismar yok | File Upload vulnerability in ChestnutCMS through 1.5.0.1000mz · chestnutcms · CWE-434 | Kritik9,8 | — | %0,9 | 6 Oca 2025 |
39İzleyin | CVE-2024-57450İstismar yok | ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.1000mz · chestnutcms · CWE-434 | Kritik9,8 | — | %0,5 | 3 Şub 2025 |
30İzleyin | CVE-2024-57451İstismar yok | ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to 1000mz · chestnutcms · CWE-22 | Yüksek7,5 | — | %0,8 | 3 Şub 2025 |
30İzleyin | CVE-2024-57452İstismar yok | ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete 1000mz · chestnutcms · CWE-552 | Yüksek7,5 | — | %0,4 | 3 Şub 2025 |
28İzleyin | CVE-2025-70073İstismar yok | An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function1000mz · chestnutcms · CWE-94 | Yüksek7,2 | — | %0,7 | 5 Şub 2026 |
21İzleyin | CVE-2025-2917İstismar yok | ChestnutCMS read readFile path traversal1000mz · chestnutcms · CWE-22 | Orta5,3 | — | %0,8 | 28 Mar 2025 |
21İzleyin | CVE-2025-5552İstismar yok | ChestnutCMS API Endpoint exec deserialization1000mz · chestnutcms · CWE-20 | Orta5,3 | — | %0,5 | 3 Haz 2025 |
21İzleyin | CVE-2025-2031İstismar yok | ChestnutCMS upload uploadFile unrestricted upload1000mz · chestnutcms · CWE-284 | Orta5,3 | — | %0,3 | 6 Mar 2025 |
20İzleyin | CVE-2025-2032İstismar yok | ChestnutCMS rename renameFile path traversal1000mz · chestnutcms · CWE-22 | Orta5,1 | — | %0,5 | 6 Mar 2025 |
8İzleyin | CVE-2025-12923İstismar yok | liweiyi ChestnutCMS download resourceDownload path traversal1000mz · chestnutcms · CWE-22 | Düşük2,0 | — | %0,6 | 10 Kas 2025 |
8İzleyin | CVE-2025-15009İstismar yok | liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload1000mz · chestnutcms · CWE-284 | Düşük2,1 | — | %0,3 | 22 Ara 2025 |
- CVE-2024-5682839İzleyin
File Upload vulnerability in ChestnutCMS through 1.5.0.
KritikCVSS 9,8İstismar yokEPSS %01000mz · chestnutcms6 Oca 2025
- CVE-2024-5745039İzleyin
ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
KritikCVSS 9,8İstismar yokEPSS %01000mz · chestnutcms3 Şub 2025
- CVE-2024-5745130İzleyin
ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to
YüksekCVSS 7,5İstismar yokEPSS %01000mz · chestnutcms3 Şub 2025
- CVE-2024-5745230İzleyin
ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete
YüksekCVSS 7,5İstismar yokEPSS %01000mz · chestnutcms3 Şub 2025
- CVE-2025-7007328İzleyin
An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function
YüksekCVSS 7,2İstismar yokEPSS %01000mz · chestnutcms5 Şub 2026
- CVE-2025-291721İzleyin
ChestnutCMS read readFile path traversal
OrtaCVSS 5,3İstismar yokEPSS %01000mz · chestnutcms28 Mar 2025
- CVE-2025-555221İzleyin
ChestnutCMS API Endpoint exec deserialization
OrtaCVSS 5,3İstismar yokEPSS %01000mz · chestnutcms3 Haz 2025
- CVE-2025-203121İzleyin
ChestnutCMS upload uploadFile unrestricted upload
OrtaCVSS 5,3İstismar yokEPSS %01000mz · chestnutcms6 Mar 2025
- CVE-2025-203220İzleyin
ChestnutCMS rename renameFile path traversal
OrtaCVSS 5,1İstismar yokEPSS %01000mz · chestnutcms6 Mar 2025
- CVE-2025-129238İzleyin
liweiyi ChestnutCMS download resourceDownload path traversal
DüşükCVSS 2,0İstismar yokEPSS %01000mz · chestnutcms10 Kas 2025
- CVE-2025-150098İzleyin
liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload
DüşükCVSS 2,1İstismar yokEPSS %01000mz · chestnutcms22 Ara 2025