| Title | https://github.com/GoogTech/sms-ssm sms-ssm 1.0 Improper Privilege Management |
|---|
| Description | The SMS-SSM system has a vertical privilege escalation vulnerability. All API interfaces of the SMS-SSM system contain a vertical privilege escalation vulnerability.For a detailed vulnerability analysis and reproduction process, please refer to the provided GitHub vulnerability link. |
|---|
| Source | ⚠️ https://github.com/GoogTech/sms-ssm/issues/27 |
|---|
| User | Jszdk (UID 95030) |
|---|
| Submission | 01/31/2026 10:39 (3 months ago) |
|---|
| Moderation | 02/18/2026 11:54 (18 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 346469 [GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d API Interface LoginInterceptor.java preHandle improper authorization] |
|---|
| Points | 17 |
|---|