EUVD-2025-205500

A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this vulnerability is the function getPositionUserList of the file /sys/position/getPositionUserList. This manipulation of the argument positionId causes improper authorization. The attack may be initiated remotely. The complexi...

CVE-2025-15126

JeecgBoot up to version 3.9.0 is affected by an authorization issue in the getPositionUserList function (/sys/position/getPositionUserList). Manipulating the positionId parameter can lead to improper authorization and information exposure. Attacks may be remotely executable; exploitation is descr...