Threats tagged 'ghsa-6gpg-xgw4-9frc'

A server-side request forgery (SSRF) vulnerability exists in JeecgBoot up to version 3.9.6, specifically in the RestTemplate.exchange function within the flow-run Endpoint component. This vulnerability allows remote attackers to manipulate requests, potentially leading to unauthorized internal network access or data exposure. Public exploit code is available, but no vendor response or patch has been provided.