PatchTheCVEchestnutcms vulnerabilities and fixes
Recent CVEs affecting chestnutcms, with upgrade or downgrade steps. 8 tracked.
chestnutcms has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-02-05. Highest priority: CVE-2024-56828 (score 59/100).
- CVE-2025-15009 MEDIUM 6.3 UPGRADE A flaw has been found in liweiyi ChestnutCMS up to 1.5.8
- CVE-2025-12923 LOW 2.7 UPGRADE A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8
- CVE-2025-70073 HIGH 7.2 UPGRADE An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template
- CVE-2025-2917 MEDIUM 4.3 UPGRADE A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3
- CVE-2024-57452 HIGH 7.5 UPGRADE ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, whi
- CVE-2024-57451 HIGH 7.5 UPGRADE ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileLi
- CVE-2024-57450 CRITICAL 9.8 UPGRADE ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
- CVE-2024-56828 CRITICAL 9.8 UPGRADE File Upload vulnerability in ChestnutCMS through 1.5.0
FAQ
How do I fix chestnutcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chestnutcms being exploited right now?
None of the tracked chestnutcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chestnutcms CVE should I patch first?
CVE-2024-56828 currently ranks highest (59/100): File Upload vulnerability in ChestnutCMS through 1.5.0.