CVE-2025-15121EPSS p34.3%

CVE-2025-15121CVE-2025-15121

jeecg / jeecg_boot

Description

A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the file /sys/sysDepartRole/getDeptRoleByUserId. Such manipulation of the argument departId leads to information disclosure. The vendor was contacted early about this disclosure but did not respond in any way.

Scoring

CVSS 2.4 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS0.41% probability of exploitation · percentile 34.3% · 2026-10-17T12:00:28Z
Last modified2026-10-13
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.