Description
Jeecg-Boot是JeecgBoot社区的一款基于代码生成器的低代码平台。 jeecg-boot 2.4.5版本存在安全漏洞，该漏洞源于权限设置不安全。攻击者利用该漏洞通过uri:/sys/user/checkOnlyUser?username=admin获得升级的权限并查看敏感信息。
Jeecg-Boot 权限绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/JeecgBoot/jeecg-boot%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3jmLink%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E.md
https://y4tacker.github.io/2024/08/01/year/2024/8/%E6%B5%85%E6%9E%90JeecgBoot-jmreport%E6%9C%80%E6%96%B0%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87/
https://www.wangsu.com/news/content/blog/3742
https://www.cnblogs.com/tlnshuju/p/19314624
https://ilikeoyt.github.io/2024/08/13/jeecgboot-%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87-AviatorScript%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.secevery.com/toBugInfo?id=1819563301860974593