JimuReport has an authentication bypass that allows an unauthenticated attacker to query a report folder listing endpoint. This flaw reveals the names of all reports and the share tokens that are normally needed to access them. Once a share token is obtained, an attacker can call protected report endpoints and pull full report definitions, which include embedded SQL statements and live query data. The impact is therefore the unauthorized acquisition of sensitive business data and potential exposure of database queries. The weakness is an Authentication Bypass (CWE-306).

The vulnerability affects the JimuReport product from jeecgboot. No specific version numbers are provided, so any installed instance of JimuReport is potentially exposed until mitigated.

The CVSS score of 8.7 classifies this as a high severity risk. The EPSS score is not available, but the lack of a KEV listing does not lessen the threat. The likely attack vector is remote, requiring only unauthenticated HTTP requests to the report folder listing endpoint. An attacker can enumerate reports and acquire share tokens without any special permissions, making exploitation trivial for anyone with network access to the application.