4 matches found
CVE-2025-29421: Improper Access Control
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...
7.5CVSS5.9AI score0.00359EPSS
SaveExploits1References1
CVE-2025-29421
The PerfreeBlog v4.0.11 Java-based CMS platform contains an arbitrary file read vulnerability located within the getThemeFileContent function. This flaw is attributed to Improper Access Control (CWE-284), allowing an unauthenticated network attacker to potentially access sensitive files on the sy...
7.5CVSS7.2AI score0.00359EPSS
SaveExploits1References1Affected Software1
20