GCVE - cpe:2.3:a:perfree:perfreeblog:4.0.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:perfree:perfreeblog:4.0.11:*:*:*:*:*:*:*

part: a version: 4.0.11 update: *

Vendor	Perfree (`946efa3a-42d9-5f13-a7ff-8460c0df677f`)
Product	Perfreeblog (`6212aa99-e119-55f0-a2e3-95acd2b83641`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitee/perfree/perfreeblog`	purl2cpe	2026-06-01 10:13:09.286515
`pkg:github/perfree/perfreeblog`	purl2cpe	2026-06-01 10:13:09.286517

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60735`	vulnerable	2026-06-08 07:37:27.335444	Details available PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function Published: 2025-10-24T00:00:00.000Z Updated: 2026-07-05T01:15:27.969Z Open on db.gcve.eu Reference links https://perfree.org.cn/ https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Upload%202/Arbitrary%20File%20Upload%20Vulnerability%20in%20PerfreeBlog%20System.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-60731`	vulnerable	2026-06-08 07:37:27.335074	Details available PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function Published: 2025-10-24T00:00:00.000Z Updated: 2026-07-05T01:15:23.364Z Open on db.gcve.eu Reference links https://perfree.org.cn/ https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Upload/Arbitrary%20File%20Upload%20Vulnerability%20in%20PerfreeBlog%20System.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-60730`	vulnerable	2026-06-08 07:37:27.334835	Details available PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function Published: 2025-10-24T00:00:00.000Z Updated: 2026-07-05T01:15:19.096Z Open on db.gcve.eu Reference links https://perfree.org.cn/ https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Deletion/Arbitrary%20File%20Deletion%20Vulnerability%20in%20PerfreeBlog%20System.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-60729`	vulnerable	2026-06-08 07:37:27.334581	Details available PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function Published: 2025-10-24T00:00:00.000Z Updated: 2026-07-05T01:15:14.278Z Open on db.gcve.eu Reference links https://github.com/dengxmenglihua/cve/blob/main/PerfreeBlog/File%20Read/Arbitrary%20File%20Read%20Vulnerability%20in%20PerfreeBlog%20System.md https://perfree.org.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-60319`	vulnerable	2026-06-08 07:37:26.868145	Details available PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java). Published: 2025-10-30T00:00:00.000Z Updated: 2025-10-30T20:51:08.362Z Open on db.gcve.eu Reference links https://github.com/PerfreeBlog/PerfreeBlog/issues/20 https://github.com/PerfreeBlog/PerfreeBlog/commit/103c79165e3a41a1729188fdc8a1e90c97c0a06d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5164`	vulnerable	2026-06-08 07:35:24.306490	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29421`	vulnerable	2026-06-08 07:14:56.441174	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29420`	vulnerable	2026-06-08 07:14:56.440917	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29281`	vulnerable	2026-06-08 07:14:56.398399	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29280`	vulnerable	2026-06-08 07:14:56.398032	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.