The SSRF vulnerability exists in dedeCMS v5.7.109
official website:https://www.dedecms.com/
version:5.7.109
Access the dnslog via the rssurl parameter
The Dnslog command is displayed successfully
Follow the GetRssLinks() function in the co do.php file
Follow up with the OpenUrl() function
Finding the parse_url() function in the PrivateInit() function is the key to ultimately triggering ssrf