Threats tagged 'ghsa-x2f8-gffm-5344'

A server-side request forgery (SSRF) vulnerability exists in JeecgBoot up to version 3.9.5, specifically in the OpenApiController.call function of the Authentication Filter component. This flaw allows remote attackers to manipulate requests, potentially leading to information disclosure and system impact. Public exploit code is available, but the vendor has not responded or provided a fix.