Описание
A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used.
Ссылки
- Exploit
- Permissions RequiredVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:1000mz:chestnutcms:1.5.2:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00097
Низкий
3.5 Low
CVSS3
2.7 Low
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 3.5
github
11 месяцев назад
A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used.
EPSS
Процентиль: 27%
0.00097
Низкий
3.5 Low
CVSS3
2.7 Low
CVSS2
Дефекты
CWE-22