Unrated severityNVD Advisory· Published Oct 30, 2025· Updated Oct 30, 2025
CVE-2025-60319
CVE-2025-60319
Description
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).
Affected products
2- PerfreeBlog/PerfreeBlogdescription
- Range: = 4.0.11
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.