JeecgBoot (<= 3.9.6)

A server-side request forgery vulnerability in JeecgBoot versions up to 3.9.6 allows remote attackers to trigger unauthorized requests via the RestTemplate.exchange function.