EUVD-2025-37024

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint AttachController.java...

CVE-2025-60319

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery (SSRF) due to a missing authorization check in the uploadAttachByUrl API endpoint, specifically within the AttachController.java file. This flaw allows an attacker to potentially trigger malicious requests made on behalf of the serv...

CVE-2025-60319: Server-Side Request Forgery (SSRF)

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint AttachController.java...