CVE-2025-15121

A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the file /sys/sysDepartRole/getDeptRoleByUserId. Such manipulation of the argument departId leads to information disclosure. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-200
• CWE-284

• https://github.com/Hwwg/cve/issues/34Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.338499Permissions Required, VDB Entry
• https://vuldb.com/?id.338499Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.711773Exploit, Third Party Advisory, VDB Entry

Published

Dec 28, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15116A security flaw has been discovered in OpenCart up to 4.1.0.…4.8
• CVE-2025-15117A weakness has been identified in Dromara Sa-Token up to 1.4…3.1
• CVE-2025-15118A security vulnerability has been detected in macrozheng mal…4.3
• CVE-2025-15119A vulnerability was detected in JeecgBoot up to 3.9.0. This …3.1
• CVE-2025-1512The PowerPack Elementor Addons (Free Widgets, Extensions and…6.4
• CVE-2025-15120A flaw has been found in JeecgBoot up to 3.9.0. Impacted is …3.1
• CVE-2025-15122A vulnerability was found in JeecgBoot up to 3.9.0. The impa…3.1
• CVE-2025-15123A vulnerability was determined in JeecgBoot up to 3.9.0. Thi…3.1
• CVE-2025-15124A vulnerability was identified in JeecgBoot up to 3.9.0. Thi…3.1
• CVE-2025-15125A security flaw has been discovered in JeecgBoot up to 3.9.0…3.1
• CVE-2025-15126A weakness has been identified in JeecgBoot up to 3.9.0. Aff…7.5
• CVE-2025-15127A security vulnerability has been detected in FantasticLBP H…9.8