https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:50:22.472927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2917 CVE-2025-2917 — ChestnutCMS read readFile path traversal 2026-10-15T12:50:22.488277+00:00

Affected: ChestnutCMS

A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. Affected is the function readFile of the file /dev-api/cms/file/read. The manipulation of the argument filePath leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.