High severity7.5NVD Advisory· Published Feb 3, 2025· Updated Jun 17, 2026

CVE-2024-57452

Description

ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder.

Affected products

ChestnutCMS/ChestnutCMScpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.5.0

Patches

Vulnerability mechanics

References

locrian-lightning-dc7.notion.site/File-Delete-1628e5e2b1a280cfb497de7b8bcff128nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000