PT-2025-43662 · Unknown · Perfreeblog

Publicado 2025-10-24 · Atualizado 2025-10-27 · CVE-2025-60729

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11

Description PerfreeBlog version 4.0.11 contains an arbitrary file read issue within the validThemeFilePath function. This allows for unauthorized access to files.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Buffer Over-read

Enumeração de Fraquezas

CWE-126

Identificadores relacionados

CVE-2025-60729

Produtos afetados

Perfreeblog

Referências · 10

• 🔥 https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Read/Arbitrary%20File%20Read%20Vulnerability%20in%20PerfreeBlog%20System.md · Exploit
• http://perfreeblog.com · Nota
• https://t.me/cveNotify/140260 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1981881211011150284 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1981788340287369284 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-60729 · Nota de Segurança
• https://t.me/cveNotify/140533 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-60729 · Aviso do Fabricante
• https://perfree.org.cn · Nota
• https://t.me/CVEtracker/35707 · Publicação no Telegram