CVE-2025-15124

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.0

Description A security issue exists in JeecgBoot that allows for improper authorization. This is due to the manipulation of the departId argument within the getParameterMap function located in the /sys/sysDepartPermission/list file. The issue can be initiated remotely and is considered difficult to exploit. The exploit is publicly available.

Recommendations Update JeecgBoot to a version later than 3.9.0.