A missing authorization check in the DownloadController of Risesoft Digital‑Infrastructure v9.6.11 allows any authenticated user to export another tenant's personnel directory. The exported XLSX files contain names, login names, organization paths, mobile numbers, and emails. This flaw is categorized as CWE‑639 (Authorization Bypass for User Data). Because the data is confidential, the compromise results in a clear confidentiality breach.

The affected product is Risesoft Digital‑Infrastructure, version 9.6.11. Any installation of that version that exposes the log module is vulnerable. The vendor identifier risesoft-y9:Digital‑Infrastructure denotes the product family. Earlier or newer releases are not listed, so the risk is confined to 9.6.11 until a mitigated release is issued.

The CVSS score of 7.1 indicates a moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector requires that the attacker be authenticated to the application; they can supply a different tenantId in the exportLoginXLS or exportNotLoginXLS endpoints to obtain the XLSX files. Because it relies on legitimate credentials and a missing authorization check, the exploit is straightforward once access is gained.