CVE-2024-57451

Summary

CVE-2024-57451 is a newly identified vulnerability affecting ChestnutCMS versions below 1.5.0. This issue lies in the FileController's getFileList function within the contentcore module. The vulnerability is classified as a directory traversal bug, enabling attackers to access and view any directory on the targeted ChestnutCMS installation. Successful exploitation could potentially lead to the exposure of sensitive information or unauthorized system access. System administrators are strongly advised to upgrade to a patched version of ChestnutCMS as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.