Unrated severityNVD Advisory· Published Oct 30, 2025· Updated Oct 30, 2025

CVE-2025-60319

Description

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PerfreeBlog/PerfreeBlogdescription
perfree/PerfreeBlogllm-create
Range: = 4.0.11

Patches

Vulnerability mechanics

References

github.com/PerfreeBlog/PerfreeBlog/commit/103c79165e3a41a1729188fdc8a1e90c97c0a06dmitre
github.com/PerfreeBlog/PerfreeBlog/issues/20mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000