CVE-2026-108891

JeecgBoot versions up to and including 3.9.5 are vulnerable to a missing authorization flaw in the SysUserController getUserDetailByUserId handler. This vulnerability allows any authenticated user to access the personal details of other users by providing arbitrary userId values. Exploitation can...