Description
JeecgBoot jmreport存在认证绕过漏洞，该漏洞是由于接口对用户的权限校验不当导致的。
JeecgBoot jmreport 认证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.wangsu.com/news/content/blog/3742
https://y4tacker.github.io/2024/08/01/year/2024/8/%E6%B5%85%E6%9E%90JeecgBoot-jmreport%E6%9C%80%E6%96%B0%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87/
https://github.com/jeecgboot/jimureport/issues/2865
https://fuping.site/2024/08/10/Jmreport-Auth-Bypass-Mitigation/
https://www.secevery.com/toBugInfo?id=1819563301860974593
https://ilikeoyt.github.io/2024/08/13/jeecgboot-%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87-AviatorScript%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.hnitns.com/index.php?id=281
https://zhuanlan.zhihu.com/p/1888282077968958078
https://www.cnblogs.com/tlnshuju/p/19314624