There is a ssrf vulnerability here 2.3.6 / 2.3.9

[hacker-wp]

Your application has a self-service link application function, which may lead to ssrf vulnerability

The specific vulnerability exploit can be seen in the figure below

com/zyd/blog/controller/RestApiController.java 、 autoLink(@validated Link link, BindingResult bindingResult)