Advisories for Maven/Org.geoserver.web/Gs-App package

It possible to achieve Service Side Request Forgery (SSRF) via the Demo request endpoint if Proxy Base URL has not been set.