Security Advisory
CVE-2025-60319
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).