5.3
Medium
CVE-2025-5552 A vulnerability was found in ChestnutCMS up to 15.1
Description
A vulnerability was found in ChestnutCMS up to 15.1. It has been declared as critical. This vulnerability affects unknown code of the file /dev-api/groovy/exec of the component API Endpoint. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ChestnutCMS | 15.1 | No fix stated |
| ChestnutCMS | 15.0 | No fix stated |
Other CVEs of ChestnutCMS
The 4 CVEs of ChestnutCMS →
CVE-2025-2917
A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3
5.3
Medium
CVE-2025-2032
A vulnerability classified as problematic was found in ChestnutCMS 1.5.2
5.1
Medium
CVE-2025-2031
A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2
5.3
Medium