CVE-2025-29420

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function...

CVE-2025-29420

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function...

CVE-2025-29421

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

PT-2025-34681 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: PerfreeBlog version 4.0.11 contains a directory traversal flaw within the getThemeFilesByName function. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2025-34682 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: PerfreeBlog version 4.0.11 contains an arbitrary file read vulnerability within the getThemeFileContent function. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-29421

The PerfreeBlog v4.0.11 Java-based CMS platform contains an arbitrary file read vulnerability located within the getThemeFileContent function. This flaw is attributed to Improper Access Control (CWE-284), allowing an unauthenticated network attacker to potentially access sensitive files on the sy...

CVE-2025-29420

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function...

CVE-2025-29421: Improper Access Control

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

CVE-2025-29421

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source a java-based development of blog/CMS site building platform. PerfreeBlog v4.0.11 version of a security vulnerability , the vulnerability stems from the getThemeFileContent function has an arbitrary file read problem...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source, a java-based blog/CMS builder. PerfreeBlog v4.0.11 version of a security vulnerability , the vulnerability stems from the getThemeFilesByName function there is a directory traversal...

CVE-2025-29420: Improper Limitation of a Pathname to a Restricted Directory

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function...

CVE-2025-29421

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

CVE-2025-29421

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

CVE-2025-29420

PerfreeBlog version v4.0.11 , a Java-based blog/CMS builder, contains a directory traversal vulnerability (CWE-22) within the getThemeFilesByName function. This flaw allows an attacker to access files outside the intended directory structure. While the vulnerability has been identified, there is ...

CVE-2025-29420

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function...

CVE-2025-5164

A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is...

CVE-2025-5164

A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is...

CVE-2025-5164 PerfreeBlog JWT JwtUtil hard-coded key

A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is...

CVE-2025-5164

Affected software: PerfreeBlog 4.0.11. Vulnerability: in the function JwtUtil of the JWT Handler, leading to use of a hard-coded cryptographic key. Impact/exposure: exploit can be initiated remotely; attack complexity is high, with confidential data integrity and availability potentially affected...