A directory traversal vulnerability in PerfreeBlog 4.0.11 enables unauthenticated attackers to read sensitive files from the underlying server.

The application fails to properly sanitize user input in the getThemeFilesByName function, which leads to a directory traversal vulnerability. This flaw is remotely exploitable by unauthenticated attackers.

The ability to perform directory traversal allows an attacker to bypass file system restrictions and access sensitive configuration files or source code. With a CVSS score of 7.5, this high-severity vulnerability poses a significant risk of data exfiltration and intellectual property theft, potentially leading to a full compromise of the application environment.

Immediate Action: Since a vendor-provided patch is currently unknown, administrators should restrict access to the affected application or disable the impacted theme functionality if possible.

Proactive Monitoring: Review web server access logs for anomalous requests containing directory traversal sequences, such as dot-dot-slash (../) patterns, targeting the theme directory.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to intercept and block HTTP requests containing path traversal characters aimed at the identified vulnerable function.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the provided researcher write-up.

Given the public availability of technical details and the unauthenticated nature of this vulnerability, organizations using PerfreeBlog 4.0.11 must prioritize mitigation. Apply the vendor update immediately once released and continue to monitor for any signs of unauthorized access to the server file system in the interim.