VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 18, 2023· Updated Jun 17, 2026

CVE-2023-30333

CVE-2023-30333

Description

An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.

Affected products

3
  • perfree/PerfreeBlog2 versions
    cpe:2.3:a:perfree:perfreeblog:3.1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:perfree:perfreeblog:3.1.2:*:*:*:*:*:*:*
    • (no CPE)range: =3.1.2
  • PerfreeBlog/PerfreeBlogdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.