Perfree vulnerabilities
We track 5 vulnerabilities in Perfree products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 6, 2026.
Latest Perfree vulnerabilities
- 7.3 High severity
go-fastdfs-web: Server-Side Request Forgery
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be execu
- 7.3 High severity
go-fastdfs-web: Incorrect Privilege Assignment
A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper auth
- 8.8 High severity
Perfreeblog: Improper Control of Generation of Code
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.
- 9.8 Critical severity
Perfreeblog: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.
- 9.8 Critical severity
Perfreeblog: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.