JeecgBoot versions up to 3.9.5 lack an authorization check in the SysDepartRoleController queryById endpoint. Low‑privileged authenticated users can send a GET request to /sys/sysDepartRole/queryById with arbitrary identifiers and retrieve department role names, codes, descriptions, and audit fields. This flaw allows non‑privileged users to obtain confidential organizational role information, potentially aiding future targeted attacks. The weakness is a missing authorization flaw (CWE‑862).

JeecgBoot 3.9.5 is impacted. No other versions are listed. The vulnerability is present in the SysDepartRoleController handler within the JeecgBoot system module.

The CVSS v3 score of 5.3 indicates moderate severity. No EPSS score is currently available, and the vulnerability is not listed in CISA KEV. Exploitation requires an authenticated user and no special conditions beyond the lack of a permission annotation. An attacker can enumerate role information simply by manipulating the id parameter on the vulnerable endpoint.