Threats tagged 'ghsa-h976-6mc8-5w2v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-60319PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the Medium6.52025-10-30GCVE DatabaseCVE-2025-60319 PerfreeBlog version 4.0.11 contains a Server-Side Request Forgery (SSRF) vulnerability due to a missing authorization check in the uploadAttachByUrl API endpoint within AttachController.java. This flaw allows unauthenticated attackers to make unauthorized requests from the server. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. No patch or remediation information is currently provided. Report on CVE-2025-60319 Vulnerability CWE-918 #ghsa-h976-6mc8-5w2v	GCVE Database	2025-10-30

Page 1 of 1