Skip to content
OpenAdvisories

Vendor

perfree

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.3

    perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery

    A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be exec…

  • High 7.3

    perfree go-fastdfs-web doInstall InstallController.java improper authorization

    A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper aut…