The vulnerability CVE-2025-60181 exists in the silence Silencesoft RSS Reader external-rss-reader component, allowing SSRF attacks. The affected versions are from initial releases through version 0.6. The CVSS 3.1 base score is 5.4 with vector AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N, indicating that the attack can be performed remotely without privileges or user interaction but requires high attack complexity. The impact includes limited confidentiality and integrity loss without availability impact. No vendor advisory or patch information is currently available.

An attacker can exploit this SSRF vulnerability to make the server perform unauthorized requests, potentially accessing internal resources or sensitive information. The impact is limited to partial confidentiality and integrity loss. There is no evidence of availability impact or active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access for the RSS Reader service to trusted endpoints and monitor for unusual outbound requests. Avoid exposing the vulnerable service to untrusted networks.