The vulnerability in dromara lamp-cloud (<=5.10.0) is an authorization bypass (CWE-639) in the getUserInfoById API endpoint. Authenticated users can iterate over the userId parameter to retrieve full profiles of other users without proper authorization checks. This leads to exposure of sensitive personal information such as mobile numbers, email addresses, national identity card numbers, and third-party OpenIDs (WeChat, DingTalk). The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker with valid authentication can access sensitive personal information of any user in the system, potentially leading to privacy violations and further targeted attacks. The confidentiality of user data is compromised, but integrity and availability are not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the getUserInfoById endpoint to only trusted users or implement additional access controls if possible.