| Title | Beijing Kaite Weiye Science and Technology Co.,Ltd. JEPaaS JEPaaSV7.2.8 vertical privilege escalation vulnerability |
|---|
| Description | The Jepass platform has a vertical privilege escalation vulnerability, which allows unauthorized access to verification codes of any mobile phone number, thereby enabling login to any user account. |
|---|
| Source | ⚠️ https://github.com/zhangbuneng/The-Jepaas-platform-has-a-vertical-privilege-escalation-vulnerability./issues/1#issue-3623625240 |
|---|
| User | yaozhangYiqiyin (UID 81367) |
|---|
| Submission | 11/14/2025 03:53 (9 months ago) |
|---|
| Moderation | 12/05/2025 09:43 (21 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 334478 [ketr JEPaaS up to 7.2.8 /je/load Authorization improper authorization] |
|---|
| Points | 16 |
|---|