Vulnerabilidades do Perfree Perfreeblog
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Perfree Perfreeblog: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:perfree:perfreeblog
CVE-2025-60319
Média · 6.5
CWE-918 30/10/2025
Server-Side Request Forgery (SSRF) em Perfree Perfreeblog
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).
CVE-2025-60735
Alta · 7.6
CWE-434 24/10/2025
Unrestricted Upload of File with Dangerous Type em Perfree Perfreeblog
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
CVE-2025-60731
Alta · 7.6
CWE-434 24/10/2025
Unrestricted Upload of File with Dangerous Type em Perfree Perfreeblog
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
CVE-2025-60730
Alta · 7.6
CWE-459 24/10/2025
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme…
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
CVE-2025-60729
Média · 5.3
CWE-126 24/10/2025
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath…
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function