EUVD-2025-37024

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint AttachController.java...

CVE-2025-60319

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery (SSRF) due to a missing authorization check in the uploadAttachByUrl API endpoint, located within the AttachController.java file. This flaw allows an attacker to potentially force the server to make unauthorized requests on its beha...

CVE-2025-60319: Server-Side Request Forgery (SSRF)

PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint AttachController.java...