Description
该漏洞是智互联-SRM平台的权限绕过造成的信息泄露漏洞，攻击者可通过特殊路径构造绕过前端权限控制，直接访问SRM系统的敏感后台接口。
智互联-SRM /adpweb/static/..;/api/authority/getUser 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cn-sec.com/archives/4576297.html
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%99%BA%E4%BA%92%E8%81%94%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8/%E6%99%BA%E8%81%94%E4%BA%91%E9%87%87SRM2.0%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3autologin%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E.md