CVE-2025-15124

A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be initiated remotely. The attack's complexity is rated as high...

CVE-2025-15124 JeecgBoot list getParameterMap improper authorization

A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be initiated remotely. The attack's complexity is rated as high...

CVE-2025-15123

JeecgBoot up to version 3.9.0 contains an authorization flaw in the file/directory path /sys/sysDepartPermission/datarule/ that can be exploited remotely. Root cause is improper authorization in that data rule handling. The vulnerability is described as having high attack complexity and publicly ...