CVE-2024-57452

ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.39% chance of exploitation in the next 30 days, 32th percentile

Published

2025-02-03

Updated

2025-02-04

Proof-of-concept exploits (1)

• https://locrian-lightning-dc7.notion.site/File-Delete-1628e5e2b1a280cfb497de7b8bcff128

References

• CVE Record
• NVD entry

Related

• CVE-2024-57451
• CVE-2024-57487
• CVE-2024-57450
• CVE-2024-57498
• CVE-2024-5745
• CVE-2024-57514