CVE-2025-15124

JeecgBoot contains an improper authorization flaw in getParameterMap within /sys/sysDepartPermission/list due to manipulation of the departId parameter. Affects JeecgBoot up to 3.9.0; exploit can be triggered remotely and is described as high complexity with publicly available exploits. Multiple ...