PT-2025-43662 · Unknown · Perfreeblog

Published 2025-10-24 · Updated 2025-10-27 · CVE-2025-60729

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11

Description PerfreeBlog version 4.0.11 contains an arbitrary file read issue within the validThemeFilePath function. This allows for unauthorized access to files.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2025-60729

Affected Products

Perfreeblog

References · 10

• 🔥 https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Read/Arbitrary%20File%20Read%20Vulnerability%20in%20PerfreeBlog%20System.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60729 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60729 · Vendor Advisory
• http://perfreeblog.com · Note
• https://t.me/cveNotify/140260 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1981881211011150284 · Twitter Post
• https://twitter.com/CVEnew/status/1981788340287369284 · Twitter Post
• https://t.me/cveNotify/140533 · Telegram Post
• https://perfree.org.cn · Note
• https://t.me/CVEtracker/35707 · Telegram Post