EUVD-2026-71613
GHSA-qr64-92v9-qvjg
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network-accessible API, no special conditions (AC:L), any valid JWT suffices (PR:L), pure read-only information disclosure with no integrity or availability impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints (including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds) to retrieve sensitive information of all users, including real names, phone numbers, email addresses, employee numbers, and role definitions, due to missing fine-grained permission checks and incomplete data desensitization.
AnalysisAI
Authorization bypass in JeecgBoot's SystemApiController (versions 3.9.2 and earlier) allows any authenticated user - regardless of role or privilege level - to enumerate the entire user directory through four underpermissioned API endpoints. Missing fine-grained permission checks on queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds, combined with incomplete data desensitization, expose sensitive PII including real names, phone numbers, email addresses, employee numbers, and role definitions for all system users. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires possession of a valid JWT token from any registered user account on the target JeecgBoot instance - no elevated privileges, administrative role, or special permission is needed beyond basic authentication (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 6.5 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) accurately characterizes this vulnerability: low-privilege authenticated network access with high confidentiality impact and no integrity or availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version has been confirmed at time of analysis; the vulnerability is documented in GitHub issues but no fix commit or tagged release appears in the provided references. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today