JeecgBoot versions up to 3.9.5 have a missing authorization flaw in the OpenApiController queryById endpoint that lets low‑privileged authenticated users retrieve OpenAPI definitions without the required openapi permissions. Attackers can perform a GET request to /openapi/queryById with a target entry id and obtain internal origin URLs, virtual paths, IP whitelists, and header and parameter templates, thereby exposing sensitive configuration details and internal architecture.

The vulnerability affects JeecgBoot JeecgBoot, specifically any installations running version 3.9.5 or earlier. No other vendor or product versions are reported as affected.

The vulnerability carries a CVSS score of 5.3, indicating medium severity. EPSS data is not available and the issue is not listed in CISA's KEV catalog. Attackers need only low‑privileged authenticated access, making the exploit relatively straightforward via a web request to /openapi/queryById. Because the exposure is internal configuration data, the impact is primarily confidentiality compromise of system structure and potential for further lateral movement.