CVE-2025-15125

JeecgBoot up to version 3.9.0 is affected by an improper authorization in queryDepartPermission (file /sys/permission/queryDepartPermission) caused by manipulating the departId parameter. The vulnerability can be exploited remotely, with high complexity and exploitability reported as difficult, a...

CVE-2025-15125 JeecgBoot queryDepartPermission improper authorization

A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. The attack can be launched remotely. This attack is...

CVE-2025-15124 JeecgBoot list getParameterMap improper authorization

A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be initiated remotely. The attack's complexity is rated as high...

CVE-2025-15124 JeecgBoot list getParameterMap improper authorization

A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be initiated remotely. The attack's complexity is rated as high...

CVE-2025-15123

JeecgBoot up to version 3.9.0 contains an authorization flaw in the file/directory path /sys/sysDepartPermission/datarule/ that can be exploited remotely. Root cause is improper authorization in that data rule handling. The vulnerability is described as having high attack complexity and publicly ...

CVE-2025-15121

A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the file /sys/sysDepartRole/getDeptRoleByUserId. Such manipulation of the argument departId leads to information disclosure. The vendor was contacted early about this disclosure bu...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...

PT-2025-53640

Name of the Vulnerable Software and Affected Versions JeecgBoot versions up to 3.9.0 Description A security issue exists in JeecgBoot that allows for remote authorization bypass. This is due to improper authorization resulting from the manipulation of the departId argument within the...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot has an authorization issue vulnerability that originates from improper authorization of the parameter departI...

PT-2025-53634

Name of the Vulnerable Software and Affected Versions JeecgBoot versions up to 3.9.0 Description A flaw exists in JeecgBoot that relates to improper authorization. This issue is present in the queryPageList function within the /sys/sysDepartRole/list file. Manipulation of the deptId argument can...

PT-2025-53639

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.0 Description A security issue exists in JeecgBoot that allows for improper authorization. This is due to the manipulation of the departId argument within the getParameterMap function located in the...

CVE-2025-10976 JeecgBoot getDepartUserList improper authorization

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high...

CVE-2025-10976

CVE-2025-10976 affects JeecgBoot up to version 3.8.2, where improper authorization can be triggered by manipulating the departId parameter in the /api/getDepartUserList endpoint. The issue is exploitable remotely, with high attack complexity and a disclosed exploit. Public references consistently...

CVE-2025-10976 JeecgBoot getDepartUserList improper authorization

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high...

CVE-2019-6509

An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...

XXE Vulnerability in Depart.asmx, a Universal Online Learning Platform for MicroXia

Micro Xia Online Learning Platform is an online education system based on B/S architecture. The product/SOPA/Depart.asmx suffers from XXE injection vulnerability, which can be exploited by an attacker to remotely read arbitrary files from the server...