Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
appspace appspace 6.2.4