CVE-2025-29421

PerfreeBlog: From CVEorg collector

View on CVE.org
Published Aug 25, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-25720 PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.
History
Type Values Removed Values Added
CPEs cpe:2.3:a:perfree:perfreeblog:4.0.11:*:*:*:*:*:*:*
Type Values Removed Values Added
Weaknesses CWE-284
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Perfree
Perfree perfreeblog
Vendors & Products Perfree
Perfree perfreeblog
Type Values Removed Values Added
Title PerfreeBlog: From CVEorg collector
References
Type Values Removed Values Added
Description PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 26, 2025, 3:49 PM
Reserved
Mar 11, 2025, 12:00 AM

View source JSON

Updated
Aug 26, 2025, 3:49 PM

JSON

Status
Analyzed
Published
Aug 25, 2025, 5:15 PM
Modified
Jun 17, 2026, 9:05 AM

View source JSON

Severity
Public date
Aug 25, 2025, 12:00 AM

View source Bugzilla JSON

Updated
Aug 26, 2025, 8:54 AM

JSON