EUVD-2025-37024

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint AttachController.java...

CVE-2025-60319

PerfreeBlog v4.0.11 is affected by CVE-2025-60319, a Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl endpoint (AttachController.java). The issue enables SSRF via the /uploadAttachByUrl API, with a CVSS v3.1 base score of 6.5 (MEDIUM) and network attack ve...